Crash due to bidi style in isolated run
authorcommit-queue@webkit.org <commit-queue@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Mon, 28 Nov 2011 20:09:04 +0000 (20:09 +0000)
committercommit-queue@webkit.org <commit-queue@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Mon, 28 Nov 2011 20:09:04 +0000 (20:09 +0000)
commit3130e9529460e3e25e6d1ddcb71b815cdcb5831d
tree239d97ee09cd343a68b6893cd90a2cf4334e82a4
parent9301a4641a813df8e81bf0038baad64803bf61d7
Crash due to bidi style in isolated run
https://bugs.webkit.org/show_bug.cgi?id=72978

Patch by Ken Buchanan <kenrb@chromium.org> on 2011-11-28
Reviewed by Eric Seidel.

Source/WebCore:

Prevent the UBA from changing the embedding level when inside an isolated run.

* rendering/InlineIterator.h:
(WebCore::notifyObserverEnteredObject):
(WebCore::notifyObserverWillExitObject):

LayoutTests:

Test to verify fix for crashing bug.

* fast/text/international/embed-bidi-style-in-isolate-crash.html: Added
* fast/text/international/embed-bidi-style-in-isolate-crash-expected.txt: Added

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@101272 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog [changed mode: 0644->0755]
LayoutTests/fast/text/international/embed-bidi-style-in-isolate-crash-expected.txt [new file with mode: 0755]
LayoutTests/fast/text/international/embed-bidi-style-in-isolate-crash.html [new file with mode: 0755]
Source/WebCore/ChangeLog [changed mode: 0644->0755]
Source/WebCore/rendering/InlineIterator.h