Rolling out r187463, because it caused memory corruption on multiple tests.
[WebKit-https.git] / Source / WebCore / ChangeLog
index 0022171..a64ec4d 100644 (file)
@@ -1,3 +1,18 @@
+2015-07-28  Alexey Proskuryakov  <ap@apple.com>
+
+        Rolling out r187463, because it caused memory corruption on multiple tests.
+
+        Original bug:
+        Crash happens when calling removeEventListener for an SVG element which has an instance inside a <defs> element of shadow tree
+        https://bugs.webkit.org/show_bug.cgi?id=147290
+
+        * svg/custom/remove-event-listener-shadow-disallowed-element-expected.txt: Removed.
+        * svg/custom/remove-event-listener-shadow-disallowed-element.svg: Removed.
+
+        * svg/SVGUseElement.cpp:
+        (WebCore::removeDisallowedElementsFromSubtree):
+        (WebCore::associateClonesWithOriginals):
+
 2015-07-28  Carlos Garcia Campos  <cgarcia@igalia.com>
 
         [GTK] Use fastMalloc instead of g_slice