<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>41181</bug_id>
          
          <creation_ts>2010-06-24 16:09:10 -0700</creation_ts>
          <short_desc>REGRESSION(53790): Neopets page with mismatched elements misrenders</short_desc>
          <delta_ts>2010-06-28 13:08:21 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>New Bugs</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc>http://www.neopets.com/games/arcade.phtml</bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="James Robinson">jamesr</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>dglazkov</cc>
    
    <cc>mitz</cc>
    
    <cc>mjs</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>242705</commentid>
    <comment_count>0</comment_count>
    <who name="James Robinson">jamesr</who>
    <bug_when>2010-06-24 16:09:10 -0700</bug_when>
    <thetext>The limit of 5 iterations in http://trac.webkit.org/changeset/53790 appears to be too low for the neopets page in the bug URL.  Bumping the limit to 7 is sufficient to render this page correctly.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>242706</commentid>
    <comment_count>1</comment_count>
    <who name="James Robinson">jamesr</who>
    <bug_when>2010-06-24 16:11:30 -0700</bug_when>
    <thetext>Here&apos;s the time spend parsing fast/parser/residual-style-hang.html with different limits on my Mac Pro (intel xeon @ 2.26 GHz):

limit / time

 5 /  379ms
 6 /  494ms
 7 /  630ms
 8 /  770ms
 9 /  930ms
10 / 1073ms

This looks like a pretty much worst case scenario so I&apos;d suggest raising the limit to 10 iterations just in case there are other sites out there that are broken.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>242734</commentid>
    <comment_count>2</comment_count>
    <who name="James Robinson">jamesr</who>
    <bug_when>2010-06-24 17:00:00 -0700</bug_when>
    <thetext>Gecko manages to render this page correctly with and without their HTML5 parser enabled.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>242736</commentid>
    <comment_count>3</comment_count>
      <attachid>59710</attachid>
    <who name="James Robinson">jamesr</who>
    <bug_when>2010-06-24 17:01:46 -0700</bug_when>
    <thetext>Created attachment 59710
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>242742</commentid>
    <comment_count>4</comment_count>
    <who name="">mitz</who>
    <bug_when>2010-06-24 17:06:12 -0700</bug_when>
    <thetext>I don’t remember how the constant 5 was chosen. Will 10 re-introduce the hang seen in bug 34059?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>242745</commentid>
    <comment_count>5</comment_count>
    <who name="James Robinson">jamesr</who>
    <bug_when>2010-06-24 17:11:38 -0700</bug_when>
    <thetext>See comment #1 for timing data from the hanging test case.  A limit of 10 is slower than a limit of 5 but not by too much (it is still too low to be likely to see a beachball).</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>242746</commentid>
    <comment_count>6</comment_count>
    <who name="">mitz</who>
    <bug_when>2010-06-24 17:15:23 -0700</bug_when>
    <thetext>The bug wasn’t about the test though, it was about a hang with some real-world content.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>242757</commentid>
    <comment_count>7</comment_count>
    <who name="James Robinson">jamesr</who>
    <bug_when>2010-06-24 17:27:13 -0700</bug_when>
    <thetext>We (Maciej, Hixie and I) chatted about this a bit in IRC.  We don&apos;t have any real-world websites that were seeing the hang (although we&apos;re pretty sure some did).  I believe that the test case Maciej created is or is close to the worst case for the fixup algorithm and don&apos;t expect that sites in the wild will be slower than it.  I hope so, anyway :)

I don&apos;t think we have too much choice, fundamentally we have to make the limit large enough to handle any websites that people care about.

The most recent Minefield nightly with the HTML5 parser enabled handles up to 100 nested &quot;&lt;b&gt;&lt;div&gt;&quot;  instances before it starts dropping content.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>243840</commentid>
    <comment_count>8</comment_count>
      <attachid>59710</attachid>
    <who name="James Robinson">jamesr</who>
    <bug_when>2010-06-28 13:08:17 -0700</bug_when>
    <thetext>Comment on attachment 59710
Patch

Clearing flags on attachment: 59710

Committed r62029: &lt;http://trac.webkit.org/changeset/62029&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>243841</commentid>
    <comment_count>9</comment_count>
    <who name="James Robinson">jamesr</who>
    <bug_when>2010-06-28 13:08:21 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>59710</attachid>
            <date>2010-06-24 17:01:46 -0700</date>
            <delta_ts>2010-06-28 13:08:17 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-41181-20100624170145.patch</filename>
            <type>text/plain</type>
            <size>1722</size>
            <attacher name="James Robinson">jamesr</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL1dlYkNvcmUvQ2hhbmdlTG9nIGIvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXgg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</data>

          </attachment>
      

    </bug>

</bugzilla>