[Pkg-chromium-commit] chromium-browser/chromium-browser.squeeze: 729 [74030] High DOM tree corruption with attribute handling.

[Giuseppe Iuculano]

Branch name: chromium-browser/chromium-browser.squeeze
Branch location : bzr+ssh://bzr.debian.org/bzr/pkg-chromium/chromium-browser/chromium-browser.squeeze
Browse location: http://bzr.debian.org/loggerhead/pkg-chromium
Revision No: 729
Revision Id: iuculano at debian.org-20110306194532-zizmne6tpc87h0d8
Committer: Giuseppe Iuculano <iuculano at debian.org>
Message : [74030] High DOM tree corruption with attribute handling.
Credit to Sergey Glazunov.


--------------------------------------------------------
  ** Added :
        - debian/patches/74030.patch

  ** Modified :
        - debian/changelog
        - debian/patches/series

-------------- next part --------------
=== modified file 'debian/changelog'
--- a/debian/changelog	2011-03-06 19:40:26 +0000
+++ b/debian/changelog	2011-03-06 19:45:32 +0000
@@ -23,8 +23,10 @@
       Credit to Daniel Divricean.
     - [72028] High Stale pointer in table painting. Credit to Martin Barbella.
     - [73746] High Stale pointer with SVG cursors. Credit to Sergey Glazunov.
+    - [74030] High DOM tree corruption with attribute handling.
+      Credit to Sergey Glazunov.
 
- -- Giuseppe Iuculano <iuculano at debian.org>  Sun, 06 Mar 2011 20:39:33 +0100
+ -- Giuseppe Iuculano <iuculano at debian.org>  Sun, 06 Mar 2011 20:44:56 +0100
 
 chromium-browser (6.0.472.63~r59945-5+squeeze2) stable-security; urgency=high
 

=== added file 'debian/patches/74030.patch'
--- a/debian/patches/74030.patch	1970-01-01 00:00:00 +0000
+++ b/debian/patches/74030.patch	2011-03-06 19:45:32 +0000
@@ -0,0 +1,18 @@
+--- a/src/third_party/WebKit/WebCore/dom/Attr.cpp
++++ b/src/third_party/WebKit/WebCore/dom/Attr.cpp
+@@ -26,6 +26,7 @@
+ #include "Element.h"
+ #include "ExceptionCode.h"
+ #include "HTMLNames.h"
++#include "ScopedEventQueue.h"
+ #include "Text.h"
+ #include "XMLNSNames.h"
+ 
+@@ -119,6 +120,7 @@ String Attr::nodeValue() const
+ 
+ void Attr::setValue(const AtomicString& value)
+ {
++    EventQueueScope scope;
+     m_ignoreChildrenChanged++;
+     removeChildren();
+     m_attribute->setValue(value);

=== modified file 'debian/patches/series'
--- a/debian/patches/series	2011-03-06 19:40:26 +0000
+++ b/debian/patches/series	2011-03-06 19:45:32 +0000
@@ -71,3 +71,4 @@
 70336.patch
 72028.patch
 73746.patch
+74030.patch