Bug 18137 - Crash on acid3 test 54
Summary: Crash on acid3 test 54
Alias: None
Product: WebKit
Classification: Unclassified
Component: DOM (show other bugs)
Version: 528+ (Nightly build)
Hardware: PC Other
: P2 Normal
Assignee: Nobody
Depends on:
Reported: 2008-03-27 02:24 PDT by kappasolaris
Modified: 2008-03-27 23:55 PDT (History)
1 user (show)

See Also:

Crash dump (4.42 KB, text/plain)
2008-03-27 02:26 PDT, kappasolaris
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description kappasolaris 2008-03-27 02:24:40 PDT
I'm getting a crash on acid3 test 54, and apparently changeset 31273 is at fault here, specifically this change in dom/Element.cpp: 
-    String localName = shouldIgnoreAttributeCase(this) ? name.lower() : name;                                                                       
+    const String& localName = (shouldIgnoreAttributeCase(this) && !name.impl()->isLower()) ? name.lower() : name; 

Note the addition of "&", if I remove it, it's all good again...
Comment 1 kappasolaris 2008-03-27 02:26:24 PDT
Created attachment 20120 [details]
Crash dump
Comment 2 kappasolaris 2008-03-27 02:42:22 PDT
To clarify, I don't know if it's specifically test 54, I just go to http://acid3.acidtests.org/ and it crashes while showing 54/100.
Comment 3 kappasolaris 2008-03-27 02:49:52 PDT
That's on OpenSolaris with Sun Studio 12 compiler.
Comment 4 Mark Rowe (bdash) 2008-03-27 23:55:07 PDT
The fact that removing the & fixes the crash for you suggests that this may be a compiler optimisation bug.