2011-05-31 Abhishek Arya <inferno@chromium.org>
authorinferno@chromium.org <inferno@chromium.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Tue, 31 May 2011 16:51:09 +0000 (16:51 +0000)
committerinferno@chromium.org <inferno@chromium.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Tue, 31 May 2011 16:51:09 +0000 (16:51 +0000)
commite6b40a2702de88ce8a8da73b78fe5d8e29ab7a28
treeed86636a600f68f2b561f5218938e0badd99c723
parenta66bd4bab9ce978b0e6621f3a8c8bfbe30033aa5
2011-05-31  Abhishek Arya  <inferno@chromium.org>

        Reviewed by Dimitri Glazkov.

        Convert raw ptr to RefPtr for documentElement.
        https://bugs.webkit.org/show_bug.cgi?id=61688

        Test: fast/dom/xml-parser-error-message-crash.svg

        * dom/XMLDocumentParser.cpp:
        (WebCore::XMLDocumentParser::insertErrorMessageBlock):
2011-05-31  Abhishek Arya  <inferno@chromium.org>

        Reviewed by Dimitri Glazkov.

        Test that we do not crash when a DOMNodeInsertedIntoDocument event
        is fired while generating a error message block in xml parsing.
        https://bugs.webkit.org/show_bug.cgi?id=61688

        * fast/dom/xml-parser-error-message-crash-expected.txt: Added.
        * fast/dom/xml-parser-error-message-crash.svg: Added.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@87737 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog
LayoutTests/fast/dom/xml-parser-error-message-crash-expected.txt [new file with mode: 0644]
LayoutTests/fast/dom/xml-parser-error-message-crash.svg [new file with mode: 0644]
Source/WebCore/ChangeLog
Source/WebCore/dom/XMLDocumentParser.cpp