REGRESSION (r105453): Crash when handling touch events

[WebKit-https.git] / Source / WebCore / ChangeLog

diff --git a/Source/WebCore/ChangeLog b/Source/WebCore/ChangeLog
index 7b62e36..13f3d0f 100644 (file)
--- a/Source/WebCore/ChangeLog
+++ b/Source/WebCore/ChangeLog
@@ -1,3 +1,19 @@
+2012-04-17  Yong Li  <yoli@rim.com>
+
+        REGRESSION (r105453): Crash when handling touch events
+        https://bugs.webkit.org/show_bug.cgi?id=81958
+
+        Reviewed by Antonio Gomes.
+
+        Always perform sanity checks when handling every touch point
+        because the node and document may have been destroyed or detached.
+
+        ManualTests/touch-stale-iframe-crash.html added.
+        (DumpRenderTree doesn't support transiting touch states in one shot yet)
+
+        * page/EventHandler.cpp:
+        (WebCore::EventHandler::handleTouchEvent):
+
 2012-04-17  Allan Sandfeld Jensen  <allan.jensen@nokia.com>
 
         Asserts in XMLHttpRequestProgressEventThrottle