[Webkit-unassigned] [Bug 43663] html5 tree builder crash in adoption agency

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=43663





--- Comment #4 from Eric Seidel <eric at webkit.org>  2010-08-06 20:09:09 PST ---
The parser is resuming after being blocked on a stylesheet. That's an nonstandard case and obey which might have bugs. I also saw a use after free crash when writing the document fragment parsing case which might be a more general crash related to this. Who knows. :)

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.