REGRESSION (r167689): Hovering file name in a file input causes a crash
[WebKit-https.git] / Source / WebCore / ChangeLog
index e58093e2bd59682629e60b840ad785fa683e15f7..83fe5333cb4ae540d1d75b9bc811dea17f72d3a0 100644 (file)
@@ -1,3 +1,20 @@
+2014-04-25  Ryosuke Niwa  <rniwa@webkit.org>
+
+        REGRESSION (r167689): Hovering file name in a file input causes a crash
+        https://bugs.webkit.org/show_bug.cgi?id=132214
+
+        Reviewed by Andreas Kling.
+
+        The bug was caused by callDefaultEventHandlersInTheBubblingOrder unconditionally
+        accessing path.contextAt(0) even if the event path was empty.
+
+        Fixed the bug by exiting early when the event path is empty.
+
+        Test: fast/events/shadow-event-path-2.html
+
+        * dom/EventDispatcher.cpp:
+        (WebCore::callDefaultEventHandlersInTheBubblingOrder):
+
 2014-04-25  Tim Horton  <timothy_horton@apple.com>
 
         REGRESSION (r167828): http/tests/media/hls/video-controls-live-stream.html fails