Changeset 200971 in webkit

Timestamp:

May 16, 2016 3:00:30 PM (8 years ago)

Author:

Alan Bujtas

Message:

RenderLayer::hitTestList could mutate the list of candidate layers.
​https://bugs.webkit.org/show_bug.cgi?id=157718
<rdar://problem/22556046>

Reviewed by Simon Fraser.

This patch ensures that we always start hittesting a clean render tree at EventHandler::hitTestResultAtPoint.

Speculative fix.

• page/EventHandler.cpp:

(WebCore::EventHandler::hitTestResultAtPoint):

Location:

trunk/Source/WebCore

Files:

• ChangeLog (modified) (1 diff)
• page/EventHandler.cpp (modified) (1 diff)

trunk/Source/WebCore/ChangeLog

@@ +1 @@
+2016-05-16  Zalan Bujtas  <zalan@apple.com>
+
+        RenderLayer::hitTestList could mutate the list of candidate layers.
+        https://bugs.webkit.org/show_bug.cgi?id=157718
+        <rdar://problem/22556046>
+
+        Reviewed by Simon Fraser.
+
+        This patch ensures that we always start hittesting a clean render tree at EventHandler::hitTestResultAtPoint.
+
+        Speculative fix.
+
+        * page/EventHandler.cpp:
+        (WebCore::EventHandler::hitTestResultAtPoint):
+
 2016-05-13  Enrica Casucci  <enrica@apple.com>
 

trunk/Source/WebCore/page/EventHandler.cpp

@@ -1138 +1138 @@
         return result;
     
+    // We should always start hittesting a clean tree.
+    renderView->document().updateLayoutIgnorePendingStylesheets();
     // hitTestResultAtPoint is specifically used to hitTest into all frames, thus it always allows child frame content.
     HitTestRequest request(hitType | HitTestRequest::AllowChildFrameContent);