2011-01-12 Kenichi Ishibashi <bashi@google.com>
authortkent@chromium.org <tkent@chromium.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Thu, 13 Jan 2011 03:55:50 +0000 (03:55 +0000)
committertkent@chromium.org <tkent@chromium.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Thu, 13 Jan 2011 03:55:50 +0000 (03:55 +0000)
commit46a996c0ac01e8021dbd7c7f00fb6a6b3ba88e44
tree72ed082ea913c5d95ae1af443e31a509fb3e1bc8
parentd408e11e7dc97d28ce8819ffa181ca84d02ab594
2011-01-12  Kenichi Ishibashi  <bashi@google.com>

        Reviewed by Kent Tamura.

        M_formElementsWithFormAttribute not cleared when FormAssociatedElement is inserted with a null m_form and then removed.
        https://bugs.webkit.org/show_bug.cgi?id=51905

        Calls unregisterFormElementWithFormAttribute() when 'form' attribute
        is removed.

        Tests: fast/forms/form-associated-element-crash.html
               fast/forms/form-associated-element-crash2.html

        * html/FormAssociatedElement.cpp:
        (WebCore::FormAssociatedElement::formAttributeChanged):

2011-01-12  Kenichi Ishibashi  <bashi@google.com>

        Reviewed by Kent Tamura.

        M_formElementsWithFormAttribute not cleared when FormAssociatedElement is inserted with a null m_form and then removed.
        https://bugs.webkit.org/show_bug.cgi?id=51905

        Add test for crash when modifying the form attribute of a form
        associated element before removing it.

        * fast/forms/form-associated-element-crash-expected.txt: Added.
        * fast/forms/form-associated-element-crash.html: Added.
        * fast/forms/form-associated-element-crash2-expected.txt: Added.
        * fast/forms/form-associated-element-crash2.html: Added.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@75676 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog
LayoutTests/fast/forms/form-associated-element-crash-expected.txt [new file with mode: 0644]
LayoutTests/fast/forms/form-associated-element-crash.html [new file with mode: 0644]
LayoutTests/fast/forms/form-associated-element-crash2-expected.txt [new file with mode: 0644]
LayoutTests/fast/forms/form-associated-element-crash2.html [new file with mode: 0644]
Source/WebCore/ChangeLog
Source/WebCore/html/FormAssociatedElement.cpp