[Webkit-unassigned] [Bug 9760] Reproducible crash in NamedAttrMapImpl::setNamedItem()

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=9760


ddkilzer at kilzer.net changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |InRadar




------- Comment #5 from ddkilzer at kilzer.net  2006-07-06 15:50 PDT -------
(In reply to comment #4)
> The bug was fixed somewhere between r13404 and r13427, according to the
> nightlies.

Looking at log comments, I'd say this was fixed in r13145, and it apparently
corresponds to <rdar://problem/4446749>.  Subversion log entry follows:


r13415 | mjs | 2006-03-21 01:08:57 -0600 (Tue, 21 Mar 2006) | 31 lines

LayoutTests:

    Reviewed by mjs.

    Test for: <rdar://problem/4483882> REGRESSION (417.8-TOT): crash at
yourmovies.com.au in WebCore::HTMLTokenizer::reset() + 92 (7818)

    * fast/tokenizer/external-script-document-open-expected.txt: Added.
    * fast/tokenizer/external-script-document-open.html: Added.
    * fast/tokenizer/resources/external-script-document-open.js: Added.
    * fast/tokenizer/resources/write-external-script-open.js: Added.
    * fast/tokenizer/write-external-script-open-expected.txt: Added.
    * fast/tokenizer/write-external-script-open.html: Added.
    * fast/tokenizer/write-inline-script-open-expected.txt: Added.
    * fast/tokenizer/write-inline-script-open.html: Added.

WebCore:

    Reviewed by Anders.

    - fixed <rdar://problem/4446749> 10.4.4: safari crash in
DOM::NamedAttrMapImpl::setNamedItem

    * bindings/scripts/CodeGeneratorJS.pm: Add a framework for typechecking
method
    arguments. For now only use it for parameters of type Attr.
    * dom/Element.idl: Arbitrary change to make it regenerate.
    * dom/dom_elementimpl.cpp:
    (WebCore::Element::setAttributeNode): ASSERT that attr is not null
    * khtml/ecma/kjs_dom.cpp:
    (KJS::toAttr): add bool ok parameter
    * khtml/ecma/kjs_dom.h:


-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.