Title: [222726] trunk/Source/WebCore
Revision
222726
Author
[email protected]
Date
2017-10-02 11:29:25 -0700 (Mon, 02 Oct 2017)

Log Message

Crashes with guard malloc under RenderFullScreen::unwrapRenderer
https://bugs.webkit.org/show_bug.cgi?id=177760

Unreviewed.

* rendering/RenderFullScreen.cpp:
(WebCore::RenderFullScreen::unwrapRenderer):

The assert accesses 'this' after it has been deleted. It is not very valuable so remove the assert.

Modified Paths

Diff

Modified: trunk/Source/WebCore/ChangeLog (222725 => 222726)


--- trunk/Source/WebCore/ChangeLog	2017-10-02 18:17:51 UTC (rev 222725)
+++ trunk/Source/WebCore/ChangeLog	2017-10-02 18:29:25 UTC (rev 222726)
@@ -1,3 +1,15 @@
+2017-10-02  Antti Koivisto  <[email protected]>
+
+        Crashes with guard malloc under RenderFullScreen::unwrapRenderer
+        https://bugs.webkit.org/show_bug.cgi?id=177760
+
+        Unreviewed.
+
+        * rendering/RenderFullScreen.cpp:
+        (WebCore::RenderFullScreen::unwrapRenderer):
+
+        The assert accesses 'this' after it has been deleted. It is not very valuable so remove the assert.
+
 2017-10-02  Zan Dobersek  <[email protected]>
 
         GraphicsContext: remove unused ENABLE(3D_TRANSFORMS) && USE(TEXTURE_MAPPER)

Modified: trunk/Source/WebCore/rendering/RenderFullScreen.cpp (222725 => 222726)


--- trunk/Source/WebCore/rendering/RenderFullScreen.cpp	2017-10-02 18:17:51 UTC (rev 222725)
+++ trunk/Source/WebCore/rendering/RenderFullScreen.cpp	2017-10-02 18:29:25 UTC (rev 222726)
@@ -192,8 +192,6 @@
     ASSERT(!placeholder());
 
     removeFromParentAndDestroy();
-    
-    ASSERT(!document().fullScreenRenderer());
 }
 
 void RenderFullScreen::setPlaceholder(RenderBlock* placeholder)
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to