Bug 88045

Summary:	Expando properties on attribute nodes disappear (wrappers are not protected against GC)
Product:	WebKit	Reporter:	Dominic Cooney <dominicc>
Component:	JavaScriptCore	Assignee:	Nobody <webkit-unassigned>
Status:	NEW ---
Severity:	Normal	CC:	ap, dbates, ggaren, jbadics, mhahnenberg, ossy
Priority:	P2
Version:	528+ (Nightly build)
Hardware:	Unspecified
OS:	Unspecified
Bug Depends on:
Bug Blocks:	87008, 87925

Description Dominic Cooney 2012-05-31 21:42:49 PDT

See attachment 144983 [details] on bug 87925 for a repro. It appears attribute nodes are being garbage collected too aggressively.

Comment 1 Dominic Cooney 2012-09-11 13:43:52 PDT

*** Bug 88062 has been marked as a duplicate of this bug. ***

Comment 2 Alexey Proskuryakov 2014-04-20 22:59:01 PDT

*** Bug 131881 has been marked as a duplicate of this bug. ***

Comment 3 Alexey Proskuryakov 2014-04-20 22:59:30 PDT

*** Bug 127480 has been marked as a duplicate of this bug. ***

Comment 4 Alexey Proskuryakov 2014-04-20 23:06:31 PDT

Consolidated test expectations in <http://trac.webkit.org/r167583>.

The test for this is fast/dom/gc-attribute-node.html, and it's not a very good test, because it sometimes starts to pass because of memory layout changes. I expect that running the second half of the test asynchronously would make it more reliable, as garbage collection would be more likely to work better.