nephele/haikuwebkit - haikuwebkit - GryphNode

nephele

/

haikuwebkit

2 lines

27 B

Plaintext

Raw Permalink Normal View History

Crash in ContainerNode::resumePostAttachCallbacks. https://bugs.webkit.org/show_bug.cgi?id=82159 Reviewed by Hajime Morita. Source/WebCore: Test: plugins/object-onfocus-mutation-crash.html * dom/ContainerNode.cpp: (WebCore::ContainerNode::resumePostAttachCallbacks): dispatching post attach callbacks when our attach depth is 1 can fire mutation events such as onfocus which can blow away |this|. Need to protect it with a RefPtr. * html/HTMLPlugInImageElement.cpp: (WebCore::HTMLPlugInImageElement::attach): add calls to suspend attach callbacks until the function completes. LayoutTests: * plugins/object-onfocus-mutation-crash-expected.txt: Added. * plugins/object-onfocus-mutation-crash.html: Added. Canonical link: https://commits.webkit.org/99498@main git-svn-id: https://svn.webkit.org/repository/webkit/trunk@112051 268f45cc-cd09-0410-ab3c-d52691b4dbfc

2012-03-26 06:11:53 +00:00

PASS. WebKit didn't crash.