Bug 88045
Summary: | Expando properties on attribute nodes disappear (wrappers are not protected against GC) | ||
---|---|---|---|
Product: | WebKit | Reporter: | Dominic Cooney <dominicc> |
Component: | JavaScriptCore | Assignee: | Nobody <webkit-unassigned> |
Status: | NEW | ||
Severity: | Normal | CC: | ap, dbates, ggaren, jbadics, mhahnenberg, ossy |
Priority: | P2 | ||
Version: | 528+ (Nightly build) | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Bug Depends on: | |||
Bug Blocks: | 87008, 87925 |
Dominic Cooney
See attachment 144983 [details] on bug 87925 for a repro. It appears attribute nodes are being garbage collected too aggressively.
Attachments | ||
---|---|---|
Add attachment proposed patch, testcase, etc. |
Dominic Cooney
*** Bug 88062 has been marked as a duplicate of this bug. ***
Alexey Proskuryakov
*** Bug 131881 has been marked as a duplicate of this bug. ***
Alexey Proskuryakov
*** Bug 127480 has been marked as a duplicate of this bug. ***
Alexey Proskuryakov
Consolidated test expectations in <http://trac.webkit.org/r167583>.
The test for this is fast/dom/gc-attribute-node.html, and it's not a very good test, because it sometimes starts to pass because of memory layout changes. I expect that running the second half of the test asynchronously would make it more reliable, as garbage collection would be more likely to work better.