[Webkit-unassigned] [Bug 190235] IntersectionObserver doesn't keep target's JS wrapper alive

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Oct 2 23:02:32 PDT 2018


https://bugs.webkit.org/show_bug.cgi?id=190235

--- Comment #1 from Ryosuke Niwa <rniwa at webkit.org> ---
We need to deploy GCReachableRef for every target kept alive in IntersectionObserver as I've done in https://trac.webkit.org/changeset/236781, and need to add the root(m_target) as an opaque root in JSIntersectionObserverEntry::visitAdditionalChildren. (Add JSCustomMarkFunction to the IDL file).

IntersectionObserver itself has a bug that it doesn't keep its callback alive while there are pending records. We need to override its visitAdditionalChildren and isReachableFromOpaqueRoots as done in JSMutationObserverCustom.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20181003/537fd4c6/attachment.html>


More information about the webkit-unassigned mailing list