This is an archived snapshot of W3C's public bugzilla bug tracker, decommissioned in April 2019. Please see the home page for more details.

Bug 10217 - EOF after foreign content can cause crash
Summary: EOF after foreign content can cause crash
Status: RESOLVED FIXED
Alias: None
Product: HTML WG
Classification: Unclassified
Component: pre-LC1 HTML5 spec (editor: Ian Hickson) (show other bugs)
Version: unspecified
Hardware: PC Linux
: P1 critical
Target Milestone: ---
Assignee: Ian 'Hixie' Hickson
QA Contact: HTML WG Bugzilla archive list
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-07-21 09:31 UTC by James Graham
Modified: 2010-10-04 14:55 UTC (History)
4 users (show)

See Also:


Attachments

Description James Graham 2010-07-21 09:31:37 UTC
Consider the document <svg></svg>

Unless I am misreading the spec, the </svg> tag is processed in the "An end tag, if the current node is not an element in the HTML namespace". This step causes the <svg> node to be popped from the open elements and then the processing to abort without changing the insertion mode.

The subsequent EOF is then handled in the foreign content mode and so does the "Pop elements from the stack of open elements until either a math element or an svg element has been popped from the stack". However there is no such element on the stack of open elements.
Comment 1 Ian 'Hixie' Hickson 2010-08-16 20:25:35 UTC
EDITOR'S RESPONSE: This is an Editor's Response to your comment. If you are satisfied with this response, please change the state of this bug to CLOSED. If you have additional information and would like the editor to reconsider, please reopen this bug. If you would like to escalate the issue to the full HTML Working Group, please add the TrackerRequest keyword to this bug, and suggest title and text for the tracker issue; or you may create a tracker issue yourself, if you are able to do so. For more details, see this document:
   http://dev.w3.org/html5/decision-policy/decision-policy.html

Status: Accepted
Change Description: see diff given below
Rationale: Concurred with reporter's comments.
Comment 2 contributor 2010-08-16 20:26:36 UTC
Checked in as WHATWG revision r5297.
Check-in comment: Make sure </svg> exits foreign content mode
http://html5.org/tools/web-apps-tracker?from=5296&to=5297