Changeset 107123 in webkit

Timestamp:

Feb 8, 2012, 12:53:54 PM (15 years ago)

Author:

inferno@chromium.org

Message:

Crash in Node::normalize.
​https://bugs.webkit.org/show_bug.cgi?id=78135

Reviewed by Ryosuke Niwa.

No new tests. Original testcase does not reduce to manageable
extent.

• dom/Node.cpp:

(WebCore::Node::normalize):

Location:

trunk/Source/WebCore

Files:

• ChangeLog (modified) (1 diff)
• dom/Node.cpp (modified) (1 diff)

trunk/Source/WebCore/ChangeLog

@@ +1 @@
+2012-02-08  Abhishek Arya  <inferno@chromium.org>
+
+        Crash in Node::normalize.
+        https://bugs.webkit.org/show_bug.cgi?id=78135
+
+        Reviewed by Ryosuke Niwa.
+
+        No new tests. Original testcase does not reduce to manageable
+        extent.
+
+        * dom/Node.cpp:
+        (WebCore::Node::normalize):
+
 2012-02-08  Antoine Labour  <piman@chromium.org>
 

trunk/Source/WebCore/dom/Node.cpp

@@ -633 +633 @@
         }
 
-        Text* text = static_cast<Text*>(node.get());
+        RefPtr<Text> text = static_cast<Text*>(node.get());
 
         // Remove empty text nodes.