/[blink]
Chromium logo

Revision 170702


Jump to revision: Previous Next
Author: morrita@chromium.org
Date: Wed Apr 2 21:00:10 2014 UTC (9 years, 1 month ago)
Changed paths: 5
Log Message:
Make StyleElement robust against tree mutation

It is possible that HTMLStyleElement::removedFrom() is called
before HTMLStyleElement::didNotifySubtreeInsertionsToDocument().

BUG=356653
TEST=append-child-style-crash.html,javascript-url-style-crash.html
R=esprehn@chromium.org, abath@chromium.org

Review URL: https://codereview.chromium.org/221673003

Changed paths

Path Details
Directorytrunk/LayoutTests/fast/dom/HTMLScriptElement/append-child-style-crash-expected.txt
(Copied from trunk/LayoutTests/fast/parser/defer-style-crash-expected.txt, r170701)
added
Directorytrunk/LayoutTests/fast/dom/HTMLScriptElement/append-child-style-crash.html added
Directorytrunk/LayoutTests/fast/frames/javascript-url-style-crash-expected.txt
(Copied from trunk/LayoutTests/fast/dom/shadow/shadow-root-node-list-expected.txt, r170701)
added , text changed
Directorytrunk/LayoutTests/fast/frames/javascript-url-style-crash.html added
Directorytrunk/Source/core/dom/StyleElement.cpp modified , text changed

Properties

Name Value
commit-bot commit-bot@chromium.org

Powered by ViewVC 1.1.26 ViewVC Help