Title: [122188] trunk
Revision
122188
Author
[email protected]
Date
2012-07-09 20:18:15 -0700 (Mon, 09 Jul 2012)

Log Message

REGRESSION(r114862-r114886): Fix a crash by switching the input type to hidden.
https://bugs.webkit.org/show_bug.cgi?id=90774

Reviewed by Andreas Kling.

Source/WebCore:

Test: fast/forms/hidden/change-type-to-hidden-after-updating-value.html

* dom/Element.cpp:
(WebCore::Element::setAttributeInternal):
Pass a copy of the existing Attribute object.

LayoutTests:

* fast/forms/hidden/change-type-to-hidden-after-updating-value.html: Added.
* fast/forms/hidden/change-type-to-hidden-after-updating-value-expected.txt: Added.

Modified Paths

Added Paths

Diff

Modified: trunk/LayoutTests/ChangeLog (122187 => 122188)


--- trunk/LayoutTests/ChangeLog	2012-07-10 02:38:21 UTC (rev 122187)
+++ trunk/LayoutTests/ChangeLog	2012-07-10 03:18:15 UTC (rev 122188)
@@ -1,3 +1,13 @@
+2012-07-09  Kent Tamura  <[email protected]>
+
+        REGRESSION(r114862-r114886): Fix a crash by switching the input type to hidden.
+        https://bugs.webkit.org/show_bug.cgi?id=90774
+
+        Reviewed by Andreas Kling.
+
+        * fast/forms/hidden/change-type-to-hidden-after-updating-value.html: Added.
+        * fast/forms/hidden/change-type-to-hidden-after-updating-value-expected.txt: Added.
+
 2012-07-09  Hayato Ito  <[email protected]>
 
         Unreviewed gardening. Update TestExpectations.

Added: trunk/LayoutTests/fast/forms/hidden/change-type-to-hidden-after-updating-value-expected.txt (0 => 122188)


--- trunk/LayoutTests/fast/forms/hidden/change-type-to-hidden-after-updating-value-expected.txt	                        (rev 0)
+++ trunk/LayoutTests/fast/forms/hidden/change-type-to-hidden-after-updating-value-expected.txt	2012-07-10 03:18:15 UTC (rev 122188)
@@ -0,0 +1 @@
+PASS unless crashed.
Property changes on: trunk/LayoutTests/fast/forms/hidden/change-type-to-hidden-after-updating-value-expected.txt
___________________________________________________________________

Added: svn:eol-style

Added: trunk/LayoutTests/fast/forms/hidden/change-type-to-hidden-after-updating-value.html (0 => 122188)


--- trunk/LayoutTests/fast/forms/hidden/change-type-to-hidden-after-updating-value.html	                        (rev 0)
+++ trunk/LayoutTests/fast/forms/hidden/change-type-to-hidden-after-updating-value.html	2012-07-10 03:18:15 UTC (rev 122188)
@@ -0,0 +1,8 @@
+<input type="text" id="input1">
+<script>
+if (window.testRunner)
+    testRunner.dumpAsText();
+document.getElementById('input1').value = 'value';
+document.getElementById('input1').type = 'hidden';
+document.write('PASS unless crashed.');
+</script>
Property changes on: trunk/LayoutTests/fast/forms/hidden/change-type-to-hidden-after-updating-value.html
___________________________________________________________________

Added: svn:eol-style

Modified: trunk/Source/WebCore/ChangeLog (122187 => 122188)


--- trunk/Source/WebCore/ChangeLog	2012-07-10 02:38:21 UTC (rev 122187)
+++ trunk/Source/WebCore/ChangeLog	2012-07-10 03:18:15 UTC (rev 122188)
@@ -1,3 +1,16 @@
+2012-07-09  Kent Tamura  <[email protected]>
+
+        REGRESSION(r114862-r114886): Fix a crash by switching the input type to hidden.
+        https://bugs.webkit.org/show_bug.cgi?id=90774
+
+        Reviewed by Andreas Kling.
+
+        Test: fast/forms/hidden/change-type-to-hidden-after-updating-value.html
+
+        * dom/Element.cpp:
+        (WebCore::Element::setAttributeInternal):
+        Pass a copy of the existing Attribute object.
+
 2012-07-07  Philippe Normand  <[email protected]>
 
         [GStreamer] cache video dimensions

Modified: trunk/Source/WebCore/dom/Element.cpp (122187 => 122188)


--- trunk/Source/WebCore/dom/Element.cpp	2012-07-10 02:38:21 UTC (rev 122187)
+++ trunk/Source/WebCore/dom/Element.cpp	2012-07-10 03:18:15 UTC (rev 122188)
@@ -679,7 +679,7 @@
         old->setValue(value);
 
     if (inUpdateStyleAttribute == NotInUpdateStyleAttribute)
-        didModifyAttribute(*old);
+        didModifyAttribute(Attribute(old->name(), old->value()));
 }
 
 void Element::attributeChanged(const Attribute& attribute)
_______________________________________________
webkit-changes mailing list
[email protected]
http://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to