[Webkit-unassigned] [Bug 103592] DRT - crashed in WebCore::SearchFieldCancelButtonElement::defaultEventHandler

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=103592





--- Comment #10 from Antonio Gomes <tonikitoo at webkit.org>  2012-11-29 08:37:17 PST ---
(From update of attachment 176718)
View in context: https://bugs.webkit.org/attachment.cgi?id=176718&action=review

> Source/WebCore/ChangeLog:13
> +        The crash happened when the search field cancel button handles mouseout
> +        event after the search input was detached. When it happens the input
> +        element returned from shadowHost() is null, need to check the pointer
> +        before dereferencing.
> +        InputFieldSpeechButton and SearchFieldResultsButtonElement have the
> +        similar issue.

The patch itself looks good, but I would feel confident if you find out and described why it passes for other platforms without your fix.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.