[Webkit-unassigned] [Bug 143511] JSON.stringify hanging WebKit on a cyclic structure

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Apr 9 16:36:05 PDT 2015


https://bugs.webkit.org/show_bug.cgi?id=143511

--- Comment #1 from Geoffrey Garen <ggaren at apple.com> ---
Two problems here:

(1) The stringifier checks for recursion, but not inside appendNextProperty.

(2) The recursion check walks the whole stack, so it is worst case O(N^2). We should use a hash instead.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150409/57701d87/attachment.html>


More information about the webkit-unassigned mailing list