10217 2010-07-21 09:31:37 +0000 EOF after foreign content can cause crash 2010-10-04 14:55:41 +0000 1 1 1 Unclassified HTML WG pre-LC1 HTML5 spec (editor: Ian Hickson) unspecified PC Linux RESOLVED FIXED P1 critical --- 1 james ian ian mike public-html-admin public-html-wg-issue-tracking public-html-bugzilla oldest_to_newest 37038 0 james 2010-07-21 09:31:37 +0000 Consider the document <svg></svg> Unless I am misreading the spec, the </svg> tag is processed in the "An end tag, if the current node is not an element in the HTML namespace". This step causes the <svg> node to be popped from the open elements and then the processing to abort without changing the insertion mode. The subsequent EOF is then handled in the foreign content mode and so does the "Pop elements from the stack of open elements until either a math element or an svg element has been popped from the stack". However there is no such element on the stack of open elements. 37469 1 ian 2010-08-16 20:25:35 +0000 EDITOR'S RESPONSE: This is an Editor's Response to your comment. If you are satisfied with this response, please change the state of this bug to CLOSED. If you have additional information and would like the editor to reconsider, please reopen this bug. If you would like to escalate the issue to the full HTML Working Group, please add the TrackerRequest keyword to this bug, and suggest title and text for the tracker issue; or you may create a tracker issue yourself, if you are able to do so. For more details, see this document: http://dev.w3.org/html5/decision-policy/decision-policy.html Status: Accepted Change Description: see diff given below Rationale: Concurred with reporter's comments. 37470 2 contributor 2010-08-16 20:26:36 +0000 Checked in as WHATWG revision r5297. Check-in comment: Make sure </svg> exits foreign content mode http://html5.org/tools/web-apps-tracker?from=5296&to=5297