I'm getting a crash on acid3 test 54, and apparently changeset 31273 is at fault here, specifically this change in dom/Element.cpp:
- String localName = shouldIgnoreAttributeCase(this) ? name.lower() : name;
+ const String& localName = (shouldIgnoreAttributeCase(this) && !name.impl()->isLower()) ? name.lower() : name;
Note the addition of "&", if I remove it, it's all good again...
Created attachment 20120 [details]
To clarify, I don't know if it's specifically test 54, I just go to http://acid3.acidtests.org/ and it crashes while showing 54/100.
That's on OpenSolaris with Sun Studio 12 compiler.
The fact that removing the & fixes the crash for you suggests that this may be a compiler optimisation bug.