WebCore:
authorweinig@apple.com <weinig@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Sat, 10 May 2008 04:44:05 +0000 (04:44 +0000)
committerweinig@apple.com <weinig@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Sat, 10 May 2008 04:44:05 +0000 (04:44 +0000)
commit549ed3fc7357b9592dee3306b366be3d0839a516
tree974bdb01fea6f3715f5ecc2a2af9fd3937d8a398
parentf81dabab348a8e12d4ed5a1f9a04edad69a3080f
WebCore:

2008-05-09  Sam Weinig  <sam@webkit.org>

        Reviewed by Mark Rowe.

        Fix for https://bugs.webkit.org/show_bug.cgi?id=18958
        NULL pointer dereference in NamedAttrMap::setNamedItem

        Test: fast/dom/NamedNodeMap-setNamedItem-crash.html

        * dom/NamedAttrMap.cpp:
        (WebCore::NamedAttrMap::setNamedItem): Null check the argument.

LayoutTests:

2008-05-09  Sam Weinig  <sam@webkit.org>

        Reviewed by Mark Rowe.

        Test for https://bugs.webkit.org/show_bug.cgi?id=18958
        NULL pointer dereference in NamedAttrMap::setNamedItem

        * fast/dom/NamedNodeMap-setNamedItem-crash-expected.txt: Added.
        * fast/dom/NamedNodeMap-setNamedItem-crash.html: Added.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@33023 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog
LayoutTests/fast/dom/NamedNodeMap-setNamedItem-crash-expected.txt [new file with mode: 0644]
LayoutTests/fast/dom/NamedNodeMap-setNamedItem-crash.html [new file with mode: 0644]
WebCore/ChangeLog
WebCore/dom/NamedAttrMap.cpp