ShadowRoot with leading or trailing white space cause a crash
[WebKit-https.git] / Source / WebCore / ChangeLog
index 704c573d64a05bfe069321e45a412b963bb65d45..95d96d09fe6c77b4abcdcc07644e2fabb62d00ea 100644 (file)
@@ -1,3 +1,18 @@
+2015-10-02  Ryosuke Niwa  <rniwa@webkit.org>
+
+        ShadowRoot with leading or trailing white space cause a crash
+        https://bugs.webkit.org/show_bug.cgi?id=149782
+
+        Reviewed by Chris Dumez.
+
+        Fixed the crash by adding a null pointer check since a TextNode that appears as a direct child
+        of a ShadowRoot doesn't have a parent element.
+
+        Test: fast/shadow-dom/shadow-root-with-child-whitespace-text-crash.html
+
+        * style/RenderTreePosition.cpp:
+        (WebCore::RenderTreePosition::previousSiblingRenderer):
+
 2015-10-05  Beth Dakin  <bdakin@apple.com>
 
         Build fix.