Title: [211712] branches/safari-603-branch
- Revision
- 211712
- Author
- matthew_han...@apple.com
- Date
- 2017-02-05 22:17:38 -0800 (Sun, 05 Feb 2017)
Log Message
Merge r211659. rdar://problem/28725791
Modified Paths
Added Paths
Diff
Modified: branches/safari-603-branch/LayoutTests/ChangeLog (211711 => 211712)
--- branches/safari-603-branch/LayoutTests/ChangeLog 2017-02-06 06:17:35 UTC (rev 211711)
+++ branches/safari-603-branch/LayoutTests/ChangeLog 2017-02-06 06:17:38 UTC (rev 211712)
@@ -1,5 +1,19 @@
2017-02-05 Matthew Hanson <matthew_han...@apple.com>
+ Merge r211659. rdar://problem/28725791
+
+ 2017-02-03 Jer Noble <jer.no...@apple.com>
+
+ ASSERT in HTMLMediaElement::~HTMLMediaElement
+ https://bugs.webkit.org/show_bug.cgi?id=167818
+
+ Reviewed by Brent Fulgham.
+
+ * media/audio-dealloc-crash-expected.txt: Added.
+ * media/audio-dealloc-crash.html: Added.
+
+2017-02-05 Matthew Hanson <matthew_han...@apple.com>
+
Merge r211446. rdar://problem/30273885
2017-01-31 Anders Carlsson <ander...@apple.com>
Added: branches/safari-603-branch/LayoutTests/media/audio-dealloc-crash-expected.txt (0 => 211712)
--- branches/safari-603-branch/LayoutTests/media/audio-dealloc-crash-expected.txt (rev 0)
+++ branches/safari-603-branch/LayoutTests/media/audio-dealloc-crash-expected.txt 2017-02-06 06:17:38 UTC (rev 211712)
@@ -0,0 +1,2 @@
+END OF TEST
+
Added: branches/safari-603-branch/LayoutTests/media/audio-dealloc-crash.html (0 => 211712)
--- branches/safari-603-branch/LayoutTests/media/audio-dealloc-crash.html (rev 0)
+++ branches/safari-603-branch/LayoutTests/media/audio-dealloc-crash.html 2017-02-06 06:17:38 UTC (rev 211712)
@@ -0,0 +1,20 @@
+<!DOCTYPE html>
+<html>
+<head>
+ <script src=""
+ <script src=""
+</head>
+<body>
+ <div>Creating and immediately destroying an Audio element should not crash.</div>
+ <script>
+ runWithKeyDown(() => {
+ document.body.innerHTML = '<audio></audio>';
+ document.body.childNodes[0].play();
+ document.body.innerHTML = '';
+ gc();
+ setTimeout(endTest, 100);
+ });
+ </script>
+</div>
+</body>
+</html>
\ No newline at end of file
Modified: branches/safari-603-branch/Source/WebCore/ChangeLog (211711 => 211712)
--- branches/safari-603-branch/Source/WebCore/ChangeLog 2017-02-06 06:17:35 UTC (rev 211711)
+++ branches/safari-603-branch/Source/WebCore/ChangeLog 2017-02-06 06:17:38 UTC (rev 211712)
@@ -1,5 +1,25 @@
2017-02-05 Matthew Hanson <matthew_han...@apple.com>
+ Merge r211659. rdar://problem/28725791
+
+ 2017-02-03 Jer Noble <jer.no...@apple.com>
+
+ ASSERT in HTMLMediaElement::~HTMLMediaElement
+ https://bugs.webkit.org/show_bug.cgi?id=167818
+
+ Reviewed by Brent Fulgham.
+
+ Test: media/audio-dealloc-crash.html
+
+ HTMLMediaElement's MediaElementSession can nominate the HTMLMediaElement itself
+ to become the playback controls session from inside the HTMLMediaElement destructor. Protect
+ against this by clearing out the session before calling updatePlaybackControlsManager().
+
+ * html/HTMLMediaElement.cpp:
+ (WebCore::HTMLMediaElement::~HTMLMediaElement):
+
+2017-02-05 Matthew Hanson <matthew_han...@apple.com>
+
Merge r211676. rdar://problem/30229990
2017-02-04 Chris Dumez <cdu...@apple.com>
Modified: branches/safari-603-branch/Source/WebCore/html/HTMLMediaElement.cpp (211711 => 211712)
--- branches/safari-603-branch/Source/WebCore/html/HTMLMediaElement.cpp 2017-02-06 06:17:35 UTC (rev 211711)
+++ branches/safari-603-branch/Source/WebCore/html/HTMLMediaElement.cpp 2017-02-06 06:17:38 UTC (rev 211712)
@@ -573,6 +573,8 @@
m_player->invalidate();
m_player = nullptr;
}
+
+ m_mediaSession = nullptr;
updatePlaybackControlsManager();
}
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes
