[Pkg-chromium-commit] chromium-browser/chromium-browser.sid: 698 High Bad cast in anchor handling. Credit to Sergey Glazunov.

[Giuseppe Iuculano]

Branch name: chromium-browser/chromium-browser.sid
Branch location : bzr+ssh://bzr.debian.org/bzr/pkg-chromium/chromium-browser/chromium-browser.sid
Browse location: http://bzr.debian.org/loggerhead/pkg-chromium
Revision No: 698
Revision Id: iuculano at debian.org-20110114153717-33oj5r5flcv195jt
Committer: Giuseppe Iuculano <iuculano at debian.org>
Message : High Bad cast in anchor handling. Credit to Sergey Glazunov. 


--------------------------------------------------------
  ** Added :
        - debian/patches/68178.patch

  ** Modified :
        - debian/changelog
        - debian/patches/series

-------------- next part --------------
=== modified file 'debian/changelog'
--- a/debian/changelog	2011-01-14 15:30:23 +0000
+++ b/debian/changelog	2011-01-14 15:37:17 +0000
@@ -7,8 +7,9 @@
     - High Stale pointer with SVG use element. Credited anonymously; plus
       indepdent discovery by miaubiz.
     - High Vorbis decoder buffer overflows. Credit to David Warren of CERT. 
+    - High Bad cast in anchor handling. Credit to Sergey Glazunov. 
 
- -- Giuseppe Iuculano <iuculano at debian.org>  Fri, 14 Jan 2011 16:29:37 +0100
+ -- Giuseppe Iuculano <iuculano at debian.org>  Fri, 14 Jan 2011 16:35:32 +0100
 
 chromium-browser (6.0.472.63~r59945-4) unstable; urgency=high
 

=== added file 'debian/patches/68178.patch'
--- a/debian/patches/68178.patch	1970-01-01 00:00:00 +0000
+++ b/debian/patches/68178.patch	2011-01-14 15:37:17 +0000
@@ -0,0 +1,16 @@
+--- a/src/third_party/WebKit/WebCore/page/FrameView.cpp
++++ b/src/third_party/WebKit/WebCore/page/FrameView.cpp
+@@ -1057,8 +1057,11 @@ bool FrameView::scrollToAnchor(const Str
+             if (anchorNode && anchorNode->hasTagName(SVGNames::viewTag)) {
+                 RefPtr<SVGViewElement> viewElement = anchorNode->hasTagName(SVGNames::viewTag) ? static_cast<SVGViewElement*>(anchorNode) : 0;
+                 if (viewElement.get()) {
+-                    RefPtr<SVGSVGElement> svg = static_cast<SVGSVGElement*>(SVGLocatable::nearestViewportElement(viewElement.get()));
+-                    svg->inheritViewAttributes(viewElement.get());
++                    SVGElement* element = SVGLocatable::nearestViewportElement(viewElement.get());
++                    if (element->hasTagName(SVGNames::svgTag)) {
++                        RefPtr<SVGSVGElement> svg = static_cast<SVGSVGElement*>(element);
++                        svg->inheritViewAttributes(viewElement.get());
++                    }
+                 }
+             }
+         }

=== modified file 'debian/patches/series'
--- a/debian/patches/series	2011-01-14 15:30:23 +0000
+++ b/debian/patches/series	2011-01-14 15:37:17 +0000
@@ -46,3 +46,4 @@
 66748.patch
 67363.patch
 68115.patch
+68178.patch