WebCore:
authormitz@apple.com <mitz@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Mon, 3 Dec 2007 18:09:34 +0000 (18:09 +0000)
committermitz@apple.com <mitz@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Mon, 3 Dec 2007 18:09:34 +0000 (18:09 +0000)
commitaf218f4be2df9972ed73ed9649e8ffd516e07c0a
treea2c42eaa668ec08eec3575a64d1526d9526f36f5
parent4e970f78e12512502afb021d254cc2b61f6c26bd
WebCore:

        Reviewed by Adam Roben.

        - fix <rdar://problem/5538651> REGRESSSION: domfuzz: null deref in WebCore::Document::canReplaceChild

        Test: fast/dom/Document/replaceChild-null-oldChild.html

        * dom/Document.cpp:
        (WebCore::Document::canReplaceChild):

LayoutTests:

        Reviewed by Adam Roben.

        - test for <rdar://problem/5538651> REGRESSSION: domfuzz: null deref in WebCore::Document::canReplaceChild

        * fast/dom/Document/replaceChild-null-oldChild-expected.txt: Added.
        * fast/dom/Document/replaceChild-null-oldChild.html: Added.
        * fast/dom/Document/resources/replaceChild-null-oldChild.js: Added.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@28354 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog
LayoutTests/fast/dom/Document/replaceChild-null-oldChild-expected.txt [new file with mode: 0644]
LayoutTests/fast/dom/Document/replaceChild-null-oldChild.html [new file with mode: 0644]
LayoutTests/fast/dom/Document/resources/replaceChild-null-oldChild.js [new file with mode: 0644]
WebCore/ChangeLog
WebCore/dom/Document.cpp