[SCM] WebKit Debian packaging branch, debian/experimental, updated. upstream/1.3.3-9427-gc2be6fc
eric at webkit.org
eric at webkit.org
Wed Dec 22 11:49:28 UTC 2010
The following commit has been merged in the debian/experimental branch:
commit 8cde50c967c6d1734a74f958cc13aba9769c0507
Author: eric at webkit.org <eric at webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Date: Sun Aug 8 08:07:20 2010 +0000
2010-08-08 Adam Barth <abarth at webkit.org>
Reviewed by Eric Seidel.
cross_fuzz WebCore::SelectionController::isFocusedAndActive ReadAV at NULL (9e865de49b1800ec790dcc35d8ebd069)
https://bugs.webkit.org/show_bug.cgi?id=43040
The pointer from Document to Frame can be null. See http://webkit.org/coding/major-objects.html.
* css/CSSStyleSelector.cpp:
(WebCore::CSSStyleSelector::SelectorChecker::checkOneSelector):
git-svn-id: http://svn.webkit.org/repository/webkit/trunk@64947 268f45cc-cd09-0410-ab3c-d52691b4dbfc
diff --git a/WebCore/ChangeLog b/WebCore/ChangeLog
index ea68d6c..7a921c1 100644
--- a/WebCore/ChangeLog
+++ b/WebCore/ChangeLog
@@ -1,5 +1,17 @@
2010-08-08 Adam Barth <abarth at webkit.org>
+ Reviewed by Eric Seidel.
+
+ cross_fuzz WebCore::SelectionController::isFocusedAndActive ReadAV at NULL (9e865de49b1800ec790dcc35d8ebd069)
+ https://bugs.webkit.org/show_bug.cgi?id=43040
+
+ The pointer from Document to Frame can be null. See http://webkit.org/coding/major-objects.html.
+
+ * css/CSSStyleSelector.cpp:
+ (WebCore::CSSStyleSelector::SelectorChecker::checkOneSelector):
+
+2010-08-08 Adam Barth <abarth at webkit.org>
+
Reviewed by Dimitri Glazkov.
frame()->selection() can't be null
diff --git a/WebCore/css/CSSStyleSelector.cpp b/WebCore/css/CSSStyleSelector.cpp
index e62f5ea..5810b00 100644
--- a/WebCore/css/CSSStyleSelector.cpp
+++ b/WebCore/css/CSSStyleSelector.cpp
@@ -2517,7 +2517,7 @@ bool CSSStyleSelector::SelectorChecker::checkOneSelector(CSSSelector* sel, Eleme
break;
}
case CSSSelector::PseudoFocus:
- if (e && e->focused() && e->document()->frame()->selection()->isFocusedAndActive())
+ if (e && e->focused() && e->document()->frame() && e->document()->frame()->selection()->isFocusedAndActive())
return true;
break;
case CSSSelector::PseudoHover: {
--
WebKit Debian packaging
More information about the Pkg-webkit-commits
mailing list