Summary: | CSS typed om serialization should use an allocated stack instead of recursion | ||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Product: | WebKit | Reporter: | Alex Christensen <achristensen> | ||||||||||
Component: | New Bugs | Assignee: | Alex Christensen <achristensen> | ||||||||||
Status: | NEW --- | ||||||||||||
Severity: | Normal | CC: | clopez, esprehn+autocc, ews-watchlist, glenn, gyuyoung.kim, macpherson, menard, sam, webkit-bug-importer, youennf | ||||||||||
Priority: | P2 | Keywords: | InRadar | ||||||||||
Version: | WebKit Nightly Build | ||||||||||||
Hardware: | Unspecified | ||||||||||||
OS: | Unspecified | ||||||||||||
Attachments: |
|
Description
Alex Christensen
2022-04-20 13:33:06 PDT
Created attachment 458009 [details]
Patch
This patch modifies the imported WPT tests. Please ensure that any changes on the tests (not coming from a WPT import) are exported to WPT. Please see https://trac.webkit.org/wiki/WPTExportProcess Filed https://bugs.chromium.org/p/chromium/issues/detail?id=1318183 to notify Chrome they have the same bug. Comment on attachment 458009 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=458009&action=review > Source/WebCore/css/typedom/numeric/CSSMathInvert.cpp:79 > + RunLoop::current().dispatch([m_value = WTFMove(m_value)] { }); What's this about? If this is really necessary, it seems like it deserves a meaty comment. If we don't do that, then we get a similar stack overflow crash in the destructors which call each other. Will add comment. Created attachment 458018 [details]
Patch
Created attachment 459317 [details]
Patch
Created attachment 459545 [details]
Patch
|