[SCM] WebKit Debian packaging branch, webkit-1.1, updated. upstream/1.1.22-985-g3c00f00

[eric at webkit.org]

The following commit has been merged in the webkit-1.1 branch:
commit c250fe568641d5c48852823fd71cb6529194eb76
Author: eric at webkit.org <eric at webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Date:   Sat Feb 27 06:22:33 2010 +0000

    2010-02-26  James Hawkins  <jhawkins at chromium.org>
    
            Reviewed by Darin Fisher.
    
            [Chromium] Verify that the Nodes being enumerated are HTML elements.
    
            https://bugs.webkit.org/show_bug.cgi?id=35463
    
            * src/WebFrameImpl.cpp:
            (WebKit::WebFrameImpl::forms):
    
    git-svn-id: http://svn.webkit.org/repository/webkit/trunk@55346 268f45cc-cd09-0410-ab3c-d52691b4dbfc

diff --git a/WebKit/chromium/ChangeLog b/WebKit/chromium/ChangeLog
index a7ccbe5..baaed29 100644
--- a/WebKit/chromium/ChangeLog
+++ b/WebKit/chromium/ChangeLog
@@ -1,3 +1,14 @@
+2010-02-26  James Hawkins  <jhawkins at chromium.org>
+
+        Reviewed by Darin Fisher.
+
+        [Chromium] Verify that the Nodes being enumerated are HTML elements.
+
+        https://bugs.webkit.org/show_bug.cgi?id=35463
+
+        * src/WebFrameImpl.cpp:
+        (WebKit::WebFrameImpl::forms):
+
 2010-02-26  Adam Barth  <abarth at webkit.org>
 
         Reviewed by Darin Fisher.
diff --git a/WebKit/chromium/src/WebFrameImpl.cpp b/WebKit/chromium/src/WebFrameImpl.cpp
index a7d449d..75d1ce8 100644
--- a/WebKit/chromium/src/WebFrameImpl.cpp
+++ b/WebKit/chromium/src/WebFrameImpl.cpp
@@ -559,7 +559,7 @@ void WebFrameImpl::forms(WebVector<WebFormElement>& results) const
     for (size_t i = 0; i < formCount; ++i) {
         Node* node = forms->item(i);
         // Strange but true, sometimes item can be 0.
-        if (node)
+        if (node && node->isHTMLElement())
             temp[i] = static_cast<HTMLFormElement*>(node);
     }
     results.swap(temp);

-- 
WebKit Debian packaging