Title: [256117] releases/WebKitGTK/webkit-2.28/Source/WebCore
- Revision
- 256117
- Author
- [email protected]
- Date
- 2020-02-10 05:22:22 -0800 (Mon, 10 Feb 2020)
Log Message
Merge r256017 - REGRESSION (r255953): [ iOS Mac ] imported/w3c/web-platform-tests/web-animations/timing-model/timelines/update-and-send-events.html is crashing
https://bugs.webkit.org/show_bug.cgi?id=207342
<rdar://problem/59227960>
Reviewed by Youenn Fablet.
DocumentTimeline::detachFromDocument() may remove the last reference to WebAnimation objects that may, in return, remove the last reference of this
DocumentTimeline. As such, this method should make a strong reference to itself for the span of this method. However, we should not be calling it
from the destructor where the only thing matters is removing the weak reference from the Document to the DocumentTimeline.
* animation/DocumentTimeline.cpp:
(WebCore::DocumentTimeline::~DocumentTimeline):
(WebCore::DocumentTimeline::detachFromDocument):
Modified Paths
Diff
Modified: releases/WebKitGTK/webkit-2.28/Source/WebCore/ChangeLog (256116 => 256117)
--- releases/WebKitGTK/webkit-2.28/Source/WebCore/ChangeLog 2020-02-10 13:22:18 UTC (rev 256116)
+++ releases/WebKitGTK/webkit-2.28/Source/WebCore/ChangeLog 2020-02-10 13:22:22 UTC (rev 256117)
@@ -1,3 +1,19 @@
+2020-02-07 Antoine Quint <[email protected]>
+
+ REGRESSION (r255953): [ iOS Mac ] imported/w3c/web-platform-tests/web-animations/timing-model/timelines/update-and-send-events.html is crashing
+ https://bugs.webkit.org/show_bug.cgi?id=207342
+ <rdar://problem/59227960>
+
+ Reviewed by Youenn Fablet.
+
+ DocumentTimeline::detachFromDocument() may remove the last reference to WebAnimation objects that may, in return, remove the last reference of this
+ DocumentTimeline. As such, this method should make a strong reference to itself for the span of this method. However, we should not be calling it
+ from the destructor where the only thing matters is removing the weak reference from the Document to the DocumentTimeline.
+
+ * animation/DocumentTimeline.cpp:
+ (WebCore::DocumentTimeline::~DocumentTimeline):
+ (WebCore::DocumentTimeline::detachFromDocument):
+
2020-02-06 Antoine Quint <[email protected]>
[Web Animations] Ensure all timelines are detached from their document
Modified: releases/WebKitGTK/webkit-2.28/Source/WebCore/animation/DocumentTimeline.cpp (256116 => 256117)
--- releases/WebKitGTK/webkit-2.28/Source/WebCore/animation/DocumentTimeline.cpp 2020-02-10 13:22:18 UTC (rev 256116)
+++ releases/WebKitGTK/webkit-2.28/Source/WebCore/animation/DocumentTimeline.cpp 2020-02-10 13:22:22 UTC (rev 256117)
@@ -75,11 +75,13 @@
DocumentTimeline::~DocumentTimeline()
{
- detachFromDocument();
+ if (m_document)
+ m_document->removeTimeline(*this);
}
void DocumentTimeline::detachFromDocument()
{
+ Ref<DocumentTimeline> protectedThis(*this);
if (m_document)
m_document->removeTimeline(*this);
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
