Use-after-free in CompositeEditCommand::cloneParagraphUnderNewElement
[WebKit-https.git] / Source / WebCore / ChangeLog
index 2a5ea3569bf9cb5782f23e0a781d20e73ea5f18f..fef80a7734fafbbee8521bb84758e56c7016f879 100644 (file)
@@ -1,3 +1,15 @@
+2013-04-22  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Use-after-free in CompositeEditCommand::cloneParagraphUnderNewElement
+        https://bugs.webkit.org/show_bug.cgi?id=114911
+
+        Reviewed by Oliver Hunt.
+
+        Back ported https://src.chromium.org/viewvc/blink?revision=148680&view=revision.
+
+        * editing/CompositeEditCommand.cpp:
+        (WebCore::CompositeEditCommand::cloneParagraphUnderNewElement):
+
 2013-04-22  Eric Carlson  <eric.carlson@apple.com>
 
         [Mac] "automatic" track selection should only select a track that matches user language