[Webkit-unassigned] [Bug 27137] REGRESSION (r44311): Reproducible crash due to infinite recursion into FrameLoader::gotoAnchor() -> FrameView::layout()

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Jul 9 17:20:19 PDT 2009


https://bugs.webkit.org/show_bug.cgi?id=27137





--- Comment #3 from mitz at webkit.org  2009-07-09 17:20:19 PDT ---
Having looked at the code, I don’t think moving to post-layout is the right
solution here. If the frame needs layout at that point, there’s no use
scrolling it until that layout occurs. But also, it seems somewhat inefficient
to go through gotoAnchor() every time. Perhaps instead of the lockedToAnchor
boolean, a RefPtr<Node> could be used and the frame could track that node
without calling back into the loader.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.


More information about the webkit-unassigned mailing list