Bug 28822 - REGRESSION(r31231): Creating document with current document's DOCTYPE causes crashes
Summary: REGRESSION(r31231): Creating document with current document's DOCTYPE causes ...
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: DOM (show other bugs)
Version: 528+ (Nightly build)
Hardware: Mac (Intel) OS X 10.5
: P1 Normal
Assignee: Alexey Proskuryakov
URL:
Keywords: HasReduction, InRadar
Depends on:
Blocks:
 
Reported: 2009-08-28 14:50 PDT by Sam Sneddon [:gsnedders]
Modified: 2019-02-06 09:02 PST (History)
2 users (show)

See Also:

Attachments
Test Case (568 bytes, text/html)
2009-08-28 14:50 PDT, Sam Sneddon [:gsnedders] 		no flags Details
proposed fix (6.88 KB, patch)
2009-09-03 15:56 PDT, Alexey Proskuryakov 		darin: review+
Details | Formatted Diff | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sam Sneddon [:gsnedders] 2009-08-28 14:50:02 PDT 
Created attachment 38758 [details]
Test Case

With the attached test case reloading it twice causes Safari to crash.

Similarly, if you try and modify the script at http://software.hixie.ch/utilities/js/live-dom-viewer/saved/221 Safari will crash.
Comment 1 Mark Rowe (bdash) 2009-08-28 14:55:36 PDT 
<rdar://problem/7180197>
Comment 2 Alexey Proskuryakov 2009-09-03 15:56:52 PDT 
Created attachment 39015 [details]
proposed fix
Comment 3 Alexey Proskuryakov 2009-09-03 17:28:32 PDT 
Committed <http://trac.webkit.org/changeset/48037>.
Comment 4 Lucas Forschler 2019-02-06 09:02:47 PST 
Mass moving XML DOM bugs to the "DOM" Component.