[Webkit-unassigned] [Bug 96232] New: [Forms] Changing attributes in blur event handler of multiple fields time input UI should not crash

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=96232

           Summary: [Forms] Changing attributes in blur event handler of
                    multiple fields time input UI should not crash
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
               URL: http://jsfiddle.net/3aXzw/
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Forms
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: yosin at chromium.org


Imported from http://crbug.com/147290

Root cause is DateTimeEditElement::layout() is called recursively.

Here is code path:

DateTimeEditElement::setEmptyValue()
.DateTimeEditElement::layout()
..DateTimeEditElement::resetLayout()
...ContainerNode::removeChildren() -- JavaScript blur event handler change HTML attribute of input[@type="time"]
....DateTimeEditElement::setEmptyValue()
.....DateTimeEditElement::layout()  -- Add hour, minute and AM/PM field
.... End DateTimeEditElement::layout()
... End DateTimeEditElement::setEmptyValue()
.. End DateTimeEditElement::resetLayout()
. End DateTimeEditElement::layout()  -- Add hour minute and AM/PM field

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.