[Webkit-unassigned] [Bug 103592] DRT - crashed in WebCore::SearchFieldCancelButtonElement::defaultEventHandler

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=103592





--- Comment #12 from Xiaobo Wang <xiaobo.wang at torchmobile.com.cn>  2012-11-30 03:26:44 PST ---
(In reply to comment #10)
> (From update of attachment 176718 [details])
> View in context: https://bugs.webkit.org/attachment.cgi?id=176718&action=review
> 
> > Source/WebCore/ChangeLog:13
> > +        The crash happened when the search field cancel button handles mouseout
> > +        event after the search input was detached. When it happens the input
> > +        element returned from shadowHost() is null, need to check the pointer
> > +        before dereferencing.
> > +        InputFieldSpeechButton and SearchFieldResultsButtonElement have the
> > +        similar issue.
> 
> The patch itself looks good, but I would feel confident if you find out and described why it passes for other platforms without your fix.

Good question, I need more investigation for the answer:)

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.