Summary: | html5 tree builder crash in adoption agency | ||
---|---|---|---|
Product: | WebKit | Reporter: | James Robinson <jamesr> |
Component: | DOM | Assignee: | Nobody <webkit-unassigned> |
Status: | RESOLVED DUPLICATE | ||
Severity: | Normal | CC: | abarth, eric, tonyg |
Priority: | P2 | ||
Version: | 528+ (Nightly build) | ||
Hardware: | PC | ||
OS: | OS X 10.5 |
Description
James Robinson
2010-08-06 19:09:09 PDT
Hum... The site doesn't crash when I load it directly. Is there a way to see what HTML the bot is trying to parse? The page at that URL is really simple. I don't think it hits the adoption agency at all. Yeah, I set an break point in HTMLTreeBuilder::callTheAdoptionAgency and it doesn't get hit. Not sure how to make progress on this bug. The parser is resuming after being blocked on a stylesheet. That's an nonstandard case and obey which might have bugs. I also saw a use after free crash when writing the document fragment parsing case which might be a more general crash related to this. Who knows. :) |