Open Bug 616094 Opened 9 years ago Updated 3 years ago
Make variable-sized buffer allocations in the HTML5 tree builder use fallible allocation and mark the parser dirty & stop parse if an allocation has failed
nsHtml5TreeBuilder::appendCharacters and, more importantly, similar comment appends use the infallible allocator to allocate a potentially large-ish buffer. Consider using a fallible allocator, checking for allocation failure and stopping the parser upon allocation failure. See also bug 573078.
You need to log in before you can comment on or make changes to this bug.