[Webkit-unassigned] [Bug 64501] The JSC and V8 garbage collector can not properly remove an audio element created by JavaScript "new Audio".
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Wed Jul 13 21:14:57 PDT 2011
https://bugs.webkit.org/show_bug.cgi?id=64501
Hwang <luxtella at company100.net> changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #100764| |review?, commit-queue?
Flag| |
--- Comment #1 from Hwang <luxtella at company100.net> 2011-07-13 21:14:57 PST ---
Created an attachment (id=100764)
--> (https://bugs.webkit.org/attachment.cgi?id=100764&action=review)
patch
The audio element's life time should synchronize with document's life time.
V8 has following problem.
1. V8 GC removes an audio element at any time.
r45537 made JS GC collect an audio element created JavaScript only if (!audio.paused()).
The condition causes 2 bugs.
1. LEAK : If playing the audio element and navigating another page,
audio.paused() returns "false".
2. GC sweeps the audio element at any time, not during playing. It makes web
developers confused because they can not play audio after GC.
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list