[Webkit-unassigned] [Bug 27137] REGRESSION (r44311): Reproducible crash due to infinite recursion into FrameLoader::gotoAnchor() -> FrameView::layout()
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Thu Jul 9 17:20:19 PDT 2009
https://bugs.webkit.org/show_bug.cgi?id=27137
--- Comment #3 from mitz at webkit.org 2009-07-09 17:20:19 PDT ---
Having looked at the code, I don’t think moving to post-layout is the right
solution here. If the frame needs layout at that point, there’s no use
scrolling it until that layout occurs. But also, it seems somewhat inefficient
to go through gotoAnchor() every time. Perhaps instead of the lockedToAnchor
boolean, a RefPtr<Node> could be used and the frame could track that node
without calling back into the loader.
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list