Title: [245452] releases/WebKitGTK/webkit-2.24/Source/WebKit
- Revision
- 245452
- Author
- [email protected]
- Date
- 2019-05-17 04:25:09 -0700 (Fri, 17 May 2019)
Log Message
Merge r245284 - Protect current WebFrame during form submission
https://bugs.webkit.org/show_bug.cgi?id=197459
<rdar://problem/50368618>
Reviewed by Alex Christensen.
The 'continueWillSubmitForm' method calls a completion handler that
might affect the state of the current frame. Ensure the frame is valid
for the scope of the function.
* WebProcess/WebPage/WebFrame.cpp:
(WebKit::WebFrame::continueWillSubmitForm):
Modified Paths
Diff
Modified: releases/WebKitGTK/webkit-2.24/Source/WebKit/ChangeLog (245451 => 245452)
--- releases/WebKitGTK/webkit-2.24/Source/WebKit/ChangeLog 2019-05-17 11:25:06 UTC (rev 245451)
+++ releases/WebKitGTK/webkit-2.24/Source/WebKit/ChangeLog 2019-05-17 11:25:09 UTC (rev 245452)
@@ -1,3 +1,18 @@
+2019-05-14 Brent Fulgham <[email protected]>
+
+ Protect current WebFrame during form submission
+ https://bugs.webkit.org/show_bug.cgi?id=197459
+ <rdar://problem/50368618>
+
+ Reviewed by Alex Christensen.
+
+ The 'continueWillSubmitForm' method calls a completion handler that
+ might affect the state of the current frame. Ensure the frame is valid
+ for the scope of the function.
+
+ * WebProcess/WebPage/WebFrame.cpp:
+ (WebKit::WebFrame::continueWillSubmitForm):
+
2019-05-10 Brent Fulgham <[email protected]>
Streamline test-and-clear operation for ContextMenu
Modified: releases/WebKitGTK/webkit-2.24/Source/WebKit/WebProcess/WebPage/WebFrame.cpp (245451 => 245452)
--- releases/WebKitGTK/webkit-2.24/Source/WebKit/WebProcess/WebPage/WebFrame.cpp 2019-05-17 11:25:06 UTC (rev 245451)
+++ releases/WebKitGTK/webkit-2.24/Source/WebKit/WebProcess/WebPage/WebFrame.cpp 2019-05-17 11:25:09 UTC (rev 245452)
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2010-2016 Apple Inc. All rights reserved.
+ * Copyright (C) 2010-2019 Apple Inc. All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
@@ -233,6 +233,7 @@
void WebFrame::continueWillSubmitForm(uint64_t listenerID)
{
+ Ref<WebFrame> protectedThis(*this);
if (auto completionHandler = m_willSubmitFormCompletionHandlers.take(listenerID))
completionHandler();
invalidatePolicyListener();
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
