RESOLVED FIXED 15760
Crash with ridiculous number of classes on an element 
https://bugs.webkit.org/show_bug.cgi?id=15760
Summary Crash with ridiculous number of classes on an element
David Smith
Reported 2007-10-30 01:00:37 PDT
The destructor for AtomicStringList is recursive, and can run out of stack space when the number of classes is too high. Load the test url, then close the window or reload to trigger the crash. The testcase is currently 14MB; I haven't yet determined what the cutoff point where it stops crashing is. A reasonable solution (which I hope to find time to try) would be to make AtomicStringList be Vector based instead of a linked list.
Attachments
Add attachment proposed patch, testcase, etc.
Sam Weinig
Comment 1 2007-12-14 13:59:31 PST
This was probably fixed in r28722 which switched the data structure to use a Vector. David, can you verify this.
David Smith
Comment 2 2007-12-14 14:36:16 PST
This is fixed as of r28722 :)
Note You need to log in before you can comment on or make changes to this bug.