Open Bug 616094 Opened 9 years ago Updated 3 years ago

Make variable-sized buffer allocations in the HTML5 tree builder use fallible allocation and mark the parser dirty & stop parse if an allocation has failed

Categories

(Core :: DOM: HTML Parser, defect)

defect
Not set

Tracking

()

People

(Reporter: hsivonen, Unassigned)

Details

nsHtml5TreeBuilder::appendCharacters and, more importantly, similar comment appends use the infallible allocator to allocate a potentially large-ish buffer. Consider using a fallible allocator, checking for allocation failure and stopping the parser upon allocation failure.

See also bug 573078.
You need to log in before you can comment on or make changes to this bug.