Reviewed by Anders Carlsson.
authorap@apple.com <ap@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Fri, 26 Feb 2010 22:30:19 +0000 (22:30 +0000)
committerap@apple.com <ap@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Fri, 26 Feb 2010 22:30:19 +0000 (22:30 +0000)
commit0a9120683189bd2648902058446985570e5ce8e7
tree722fc4fb4c54de0748abdcc8228e94d396ee4cd7
parentaee9cdff8a7ac13faaea441b2933ee89c1497978
    Reviewed by Anders Carlsson.

        https://bugs.webkit.org/show_bug.cgi?id=35450
        Crash when a Java array property accessor raises an exception

        Test: java/inaccessible-class.html. Adding with a FAIL result, because this doesn't raise
        an exception in Firefox. I don't know what the formally correct behavior is, but it's good
        to avoid crashing.

        * bridge/jni/jsc/JNIBridgeJSC.cpp: (JavaField::valueFromInstance): Check if the result
        is null before interpreting it as an object or array.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@55315 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog
LayoutTests/java/SharedApplet.java
LayoutTests/java/inaccessible-class-expected.txt [new file with mode: 0644]
LayoutTests/java/inaccessible-class.html [new file with mode: 0644]
WebCore/ChangeLog
WebCore/bridge/jni/jsc/JNIBridgeJSC.cpp