Title: [114060] branches/safari-534.57-branch/Source/WebCore
Diff
Modified: branches/safari-534.57-branch/Source/WebCore/ChangeLog (114059 => 114060)
--- branches/safari-534.57-branch/Source/WebCore/ChangeLog 2012-04-13 00:58:30 UTC (rev 114059)
+++ branches/safari-534.57-branch/Source/WebCore/ChangeLog 2012-04-13 01:01:03 UTC (rev 114060)
@@ -1,3 +1,22 @@
+2012-04-12 Lucas Forschler <[email protected]>
+
+ Merge 113528
+
+ 2012-04-06 Oliver Hunt <[email protected]>
+
+ Accessing the returnValue of a modal dialog should be performed directly on the global object.
+ https://bugs.webkit.org/show_bug.cgi?id=83414
+
+ Reviewed by Gavin Barraclough.
+
+ Presumably during the mass-devirtualising of JSObject, this deliberate use of
+ the GlobalObject's property lookup logic directly was replaced with a dynamic
+ call. That results in the DOMWindow filtering out the lookup. This regression
+ was masked by r93567.
+
+ * bindings/js/JSDOMWindowCustom.cpp:
+ (WebCore::DialogHandler::returnValue):
+
2012-04-12 Lucas Forschler <[email protected]>
<rdar://problem/11189647> Nectarine: XML error document creation should not fire mutation events (80765)
Modified: branches/safari-534.57-branch/Source/WebCore/bindings/js/JSDOMWindowCustom.cpp (114059 => 114060)
--- branches/safari-534.57-branch/Source/WebCore/bindings/js/JSDOMWindowCustom.cpp 2012-04-13 00:58:30 UTC (rev 114059)
+++ branches/safari-534.57-branch/Source/WebCore/bindings/js/JSDOMWindowCustom.cpp 2012-04-13 01:01:03 UTC (rev 114060)
@@ -640,7 +640,7 @@
return jsUndefined();
Identifier identifier(m_exec, "returnValue");
PropertySlot slot;
- if (!m_globalObject->methodTable()->getOwnPropertySlot(m_globalObject, m_exec, identifier, slot))
+ if (!JSGlobalObject::getOwnPropertySlot(m_globalObject, m_exec, identifier, slot))
return jsUndefined();
return slot.getValue(m_exec, identifier);
}
_______________________________________________
webkit-changes mailing list
[email protected]
http://lists.webkit.org/mailman/listinfo.cgi/webkit-changes
