dispatchEvent call can execute javascript and blow away endRoot from underneath
authorrniwa@webkit.org <rniwa@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Tue, 21 May 2013 19:34:31 +0000 (19:34 +0000)
committerrniwa@webkit.org <rniwa@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Tue, 21 May 2013 19:34:31 +0000 (19:34 +0000)
commit6128646e1e45fde1f7698529a3166fe580fd7dc4
tree2094436c31ac7f8b6f2d17b9d919aefa20a9d348
parentd78dca3f11d191ba1b626a81e2538d57ee5ad902
dispatchEvent call can execute javascript and blow away endRoot from underneath
https://bugs.webkit.org/show_bug.cgi?id=116483

Source/WebCore:

Reviewed by Andreas Kling.

Merge https://chromium.googlesource.com/chromium/blink/+/798cba0af9b2aff21e475e2e08ea3ca5e97dfc2c.

Test: editing/undo/undo-after-event-edited.html

* editing/Editor.cpp:
(WebCore::dispatchEditableContentChangedEvents):

LayoutTests:

Reviewed by Andreas Kling.

Add a regression test.

* editing/undo/undo-after-event-edited-expected.txt: Added.
* editing/undo/undo-after-event-edited.html: Added.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@150469 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog
LayoutTests/editing/undo/undo-after-event-edited-expected.txt [new file with mode: 0644]
LayoutTests/editing/undo/undo-after-event-edited.html [new file with mode: 0644]
Source/WebCore/ChangeLog
Source/WebCore/editing/Editor.cpp