Title: [107123] trunk/Source/WebCore
Revision
107123
Author
infe...@chromium.org
Date
2012-02-08 12:53:54 -0800 (Wed, 08 Feb 2012)

Log Message

Crash in Node::normalize.
https://bugs.webkit.org/show_bug.cgi?id=78135

Reviewed by Ryosuke Niwa.

No new tests. Original testcase does not reduce to manageable
extent.

* dom/Node.cpp:
(WebCore::Node::normalize):

Modified Paths

Diff

Modified: trunk/Source/WebCore/ChangeLog (107122 => 107123)


--- trunk/Source/WebCore/ChangeLog	2012-02-08 20:42:19 UTC (rev 107122)
+++ trunk/Source/WebCore/ChangeLog	2012-02-08 20:53:54 UTC (rev 107123)
@@ -1,3 +1,16 @@
+2012-02-08  Abhishek Arya  <infe...@chromium.org>
+
+        Crash in Node::normalize.
+        https://bugs.webkit.org/show_bug.cgi?id=78135
+
+        Reviewed by Ryosuke Niwa.
+
+        No new tests. Original testcase does not reduce to manageable
+        extent.
+
+        * dom/Node.cpp:
+        (WebCore::Node::normalize):
+
 2012-02-08  Antoine Labour  <pi...@chromium.org>
 
         Make WebGL context current early to check validity

Modified: trunk/Source/WebCore/dom/Node.cpp (107122 => 107123)


--- trunk/Source/WebCore/dom/Node.cpp	2012-02-08 20:42:19 UTC (rev 107122)
+++ trunk/Source/WebCore/dom/Node.cpp	2012-02-08 20:53:54 UTC (rev 107123)
@@ -632,7 +632,7 @@
             continue;
         }
 
-        Text* text = static_cast<Text*>(node.get());
+        RefPtr<Text> text = static_cast<Text*>(node.get());
 
         // Remove empty text nodes.
         if (!text->length()) {
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
http://lists.webkit.org/mailman/listinfo.cgi/webkit-changes

Reply via email to