From 8349a92ef5b46b3f414e277988138f0040291d1b Mon Sep 17 00:00:00 2001
From: "mrbkap%gmail.com"
 <mrbkap%gmail.com@18797224-902f-48f8-a5cc-f745e15eee43>
Date: Thu, 19 Jan 2006 00:05:21 +0000
Subject: [PATCH] bug 323736: Handle bogus comments that start with </ as
 invalid comments, per HTML5 and to have compatibility with other browsers.
 r+sr=jst

git-svn-id: svn://10.0.0.236/trunk@187790 18797224-902f-48f8-a5cc-f745e15eee43
---
 mozilla/parser/htmlparser/src/nsHTMLTokens.cpp | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/mozilla/parser/htmlparser/src/nsHTMLTokens.cpp b/mozilla/parser/htmlparser/src/nsHTMLTokens.cpp
index 7f43a0b638b..b9063808a8d 100644
--- a/mozilla/parser/htmlparser/src/nsHTMLTokens.cpp
+++ b/mozilla/parser/htmlparser/src/nsHTMLTokens.cpp
@@ -1242,13 +1242,16 @@ CCommentToken::ConsumeStrictComment(nsScanner& aScanner)
   lt = current;
   lt.advance(-2); // <!
 
+  current.advance(-1);
+
   // Regular comment must start with <!--
-  if (current != end && *current == kMinus &&
+  if (*current == kExclamation &&
+      ++current != end && *current == kMinus &&
       ++current != end && *current == kMinus &&
       ++current != end) {
     nsScannerIterator currentEnd = end;
     PRBool balancedComment = PR_FALSE;
-    static NS_NAMED_LITERAL_STRING(dashes, "--");
+    NS_NAMED_LITERAL_STRING(dashes, "--");
     beginData = current;
 
     while (FindInReadable(dashes, current, currentEnd)) {
@@ -1265,10 +1268,10 @@ CCommentToken::ConsumeStrictComment(nsScanner& aScanner)
         aScanner.BindSubstring(mCommentDecl, lt, ++gt);
         aScanner.SetPosition(gt);
         return NS_OK;
-      } else {
-        // Continue after the last '--'
-        currentEnd = end;
       }
+
+      // Continue after the last '--'
+      currentEnd = end;
     }
   }