[Webkit-unassigned] [Bug 22357] Crash when setting className from js

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=22357


darin at apple.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #25932|review?                     |review-
               Flag|                            |




------- Comment #6 from darin at apple.com  2008-12-10 17:54 PDT -------
(From update of attachment 25932)
The class attribute itself is supposed to be a mapped attribute. It's not OK
that we can't get class names -- that means that CSS styles that are based on
class won't work! If hasClass is true, but there's no mapped attributes
pointer, then something strange is going on.

Looking at the test case it looks like the key here is that the class name is
being set by SVG "baseValue" code. I think that means that the SVG code is not
setting the attribute properly, and that's resulting in the object being in a
strange state. It's that animation code incorrectly setting the attribute that
needs to be fixed, not the CSS selector matching code.

If the change was correct and was needed in this function, then it would also
be needed in CSSStyleSelector::SelectorChecker::checkOneSelector.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.