Use-after-free in CompositeEditCommand::cloneParagraphUnderNewElement
authorrniwa@webkit.org <rniwa@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Mon, 22 Apr 2013 20:39:24 +0000 (20:39 +0000)
committerrniwa@webkit.org <rniwa@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Mon, 22 Apr 2013 20:39:24 +0000 (20:39 +0000)
commit82418c9a4f8c1f75c59f82afe79bef28e1a3c3bc
tree29ae931da4e515bd53364b1ffbd2aa167c7430b8
parent9660124b6320d147dcc0ea4bae6fb5f49a0be125
Use-after-free in CompositeEditCommand::cloneParagraphUnderNewElement
https://bugs.webkit.org/show_bug.cgi?id=114911

Reviewed by Oliver Hunt.

Back ported https://src.chromium.org/viewvc/blink?revision=148680&view=revision.

* editing/CompositeEditCommand.cpp:
(WebCore::CompositeEditCommand::cloneParagraphUnderNewElement):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@148908 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Source/WebCore/ChangeLog
Source/WebCore/editing/CompositeEditCommand.cpp