[Pkg-chromium-commit] chromium-browser/chromium-browser.squeeze: 718 [71114] High Stale node in table child handling. Credit to Martin Barbella

[Giuseppe Iuculano]

Branch name: chromium-browser/chromium-browser.squeeze
Branch location : bzr+ssh://bzr.debian.org/bzr/pkg-chromium/chromium-browser/chromium-browser.squeeze
Browse location: http://bzr.debian.org/loggerhead/pkg-chromium
Revision No: 718
Revision Id: iuculano at debian.org-20110303171402-tjud861w6u7184lt
Committer: Giuseppe Iuculano <iuculano at debian.org>
Message : [71114] High Stale node in table child handling. Credit to Martin Barbella


--------------------------------------------------------
  ** Added :
        - debian/patches/71114.patch

  ** Modified :
        - debian/changelog
        - debian/patches/series

-------------- next part --------------
=== modified file 'debian/changelog'
--- a/debian/changelog	2011-03-03 17:07:18 +0000
+++ b/debian/changelog	2011-03-03 17:14:02 +0000
@@ -10,8 +10,9 @@
     - [64-bit Linux only] [70376] Medium Out-of-bounds read in pickle
       deserialization. Credit to Evgeniy Stepanov of the Chromium development
       community.
+   -  [71114] High Stale node in table child handling. Credit to Martin Barbella
 
- -- Giuseppe Iuculano <iuculano at debian.org>  Thu, 03 Mar 2011 17:00:14 +0100
+ -- Giuseppe Iuculano <iuculano at debian.org>  Thu, 03 Mar 2011 18:13:28 +0100
 
 chromium-browser (6.0.472.63~r59945-5+squeeze2) stable-security; urgency=high
 

=== added file 'debian/patches/71114.patch'
--- a/debian/patches/71114.patch	1970-01-01 00:00:00 +0000
+++ b/debian/patches/71114.patch	2011-03-03 17:14:02 +0000
@@ -0,0 +1,11 @@
+--- a/src/third_party/WebKit/WebCore/rendering/RenderTable.cpp
++++ b/src/third_party/WebKit/WebCore/rendering/RenderTable.cpp
+@@ -154,7 +154,7 @@ void RenderTable::addChild(RenderObject*
+ 
+     if (!wrapInAnonymousSection) {
+         // If the next renderer is actually wrapped in an anonymous table section, we need to go up and find that.
+-        while (beforeChild && !beforeChild->isTableSection() && !beforeChild->isTableCol() && beforeChild->style()->display() != TABLE_CAPTION)
++        while (beforeChild && beforeChild->parent() != this)
+             beforeChild = beforeChild->parent();
+ 
+         RenderBox::addChild(child, beforeChild);

=== modified file 'debian/patches/series'
--- a/debian/patches/series	2011-03-03 17:07:18 +0000
+++ b/debian/patches/series	2011-03-03 17:14:02 +0000
@@ -61,3 +61,4 @@
 68263.patch
 69640.patch
 70376.patch
+71114.patch