Title: [149060] trunk/Source/WebCore
- Revision
- 149060
- Author
- akl...@apple.com
- Date
- 2013-04-24 13:00:44 -0700 (Wed, 24 Apr 2013)
Log Message
ElementData::attributeItem() should bounds-check the index.
<http://webkit.org/b/115076>
Reviewed by Antti Koivisto.
Switch the ASSERT_WITH_SECURITY_IMPLICATION to a RELEASE_ASSERT.
* dom/Element.h:
(WebCore::ElementData::attributeItem):
Modified Paths
Diff
Modified: trunk/Source/WebCore/ChangeLog (149059 => 149060)
--- trunk/Source/WebCore/ChangeLog 2013-04-24 19:59:18 UTC (rev 149059)
+++ trunk/Source/WebCore/ChangeLog 2013-04-24 20:00:44 UTC (rev 149060)
@@ -1,5 +1,17 @@
2013-04-24 Andreas Kling <akl...@apple.com>
+ ElementData::attributeItem() should bounds-check the index.
+ <http://webkit.org/b/115076>
+
+ Reviewed by Antti Koivisto.
+
+ Switch the ASSERT_WITH_SECURITY_IMPLICATION to a RELEASE_ASSERT.
+
+ * dom/Element.h:
+ (WebCore::ElementData::attributeItem):
+
+2013-04-23 Andreas Kling <akl...@apple.com>
+
Setting an inline style property to "" shouldn't cause style recalc unless the property was present.
<http://webkit.org/b/115122>
Modified: trunk/Source/WebCore/dom/Element.h (149059 => 149060)
--- trunk/Source/WebCore/dom/Element.h 2013-04-24 19:59:18 UTC (rev 149059)
+++ trunk/Source/WebCore/dom/Element.h 2013-04-24 20:00:44 UTC (rev 149060)
@@ -1006,7 +1006,7 @@
inline const Attribute* ElementData::attributeItem(unsigned index) const
{
- ASSERT_WITH_SECURITY_IMPLICATION(index < length());
+ RELEASE_ASSERT(index < length());
return attributeBase() + index;
}
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes
