REGRESSION(r140101): caused debug asserts in fast/forms/associated-element-crash...
authordominicc@chromium.org <dominicc@chromium.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Wed, 23 Jan 2013 15:22:15 +0000 (15:22 +0000)
committerdominicc@chromium.org <dominicc@chromium.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Wed, 23 Jan 2013 15:22:15 +0000 (15:22 +0000)
commitbf21d4537f00862be174de7939d3353ac24df796
tree7f6731f02923a4787ac297b08467837961c183d1
parentd6a153e7882ea149348379ec3644c3f9e5c0d168
REGRESSION(r140101): caused debug asserts in fast/forms/associated-element-crash.html and html5lib/run-template.html
https://bugs.webkit.org/show_bug.cgi?id=107237

Patch by Rafael Weinstein <rafaelw@chromium.org> on 2013-01-23
Reviewed by Adam Barth.

Source/WebCore:

No new tests needed.

When the parser foster-parent's a node out of a table context and the foster parent is a template element, set the Task.parent
to be the template element's content, rather than the element itself. This ensures the foster-parented node isn't errorenously
reparented.

* html/parser/HTMLConstructionSite.cpp:
(WebCore::HTMLConstructionSite::findFosterSite):

LayoutTests:

* platform/chromium/TestExpectations:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@140537 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog
LayoutTests/platform/chromium/TestExpectations
Source/WebCore/ChangeLog
Source/WebCore/html/parser/HTMLConstructionSite.cpp