Title: [213906] branches/safari-603-branch/Source/WebCore/ChangeLog
- Revision
- 213906
- Author
- matthew_han...@apple.com
- Date
- 2017-03-14 10:13:25 -0700 (Tue, 14 Mar 2017)
Log Message
Merge r212828. rdar://problem/30636288
Modified Paths
Diff
Modified: branches/safari-603-branch/Source/WebCore/ChangeLog (213905 => 213906)
--- branches/safari-603-branch/Source/WebCore/ChangeLog 2017-03-14 17:13:22 UTC (rev 213905)
+++ branches/safari-603-branch/Source/WebCore/ChangeLog 2017-03-14 17:13:25 UTC (rev 213906)
@@ -1,3 +1,33 @@
+2017-02-22 Brent Fulgham <bfulg...@apple.com>
+
+ Merge r212828. rdar://problem/30636288
+
+ 2017-02-21 Antti Koivisto <an...@apple.com>
+
+ REGRESSION(r207669): Crash after mutating selector text
+ https://bugs.webkit.org/show_bug.cgi?id=168655
+ <rdar://problem/30632111>
+
+ Reviewed by Brent Fulgham.
+
+ Test: fast/css/selector-text-mutation-crash.html
+
+ * style/StyleScope.cpp:
+ (WebCore::Style::Scope::resolver):
+ (WebCore::Style::Scope::updateStyleResolver):
+
+ Protect against entering scheduleUpdate and wiping style resolver while updating it.
+ Extension stylesheets can trigger this.
+
+ (WebCore::Style::Scope::scheduleUpdate):
+
+ Clear the style resolver immediately if style sheet content changes. The resolver may
+ have data structures that point to the old sheet contents.
+
+ The resolver would get wiped anyway when the scheduled update actually occurs.
+
+ * style/StyleScope.h:
+
2017-02-28 Matthew Hanson <matthew_han...@apple.com>
Merge r213078. rdar://problem/30704432
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes
