Skip to content
  • mitz@apple.com's avatar
    WebCore: · 4f8770ab
    mitz@apple.com authored
            Reviewed by Oliver Hunt.
    
            - fix http://bugs.webkit.org/show_bug.cgi?id=16603
              <rdar://problem/5664199> Crash when resizing text field
    
            Test: fast/layers/resize-layer-deletion-crash.html
    
            The event handler has only a weak reference to the layer that is
            currently in resize mode, so it is the layer's responsibility to let
            the event handler know if it has been destroyed while in that mode.
    
            * page/EventHandler.cpp:
            (WebCore::EventHandler::resizeLayerDestroyed): Added. Resets
            m_resizeLayer to 0.
            * page/EventHandler.h:
            * rendering/RenderLayer.cpp:
            (WebCore::RenderLayer::~RenderLayer): Added a call to
            EventHandler::resizeLayerDestroyed() if the layer is in resize mode.
    
    LayoutTests:
    
            Reviewed by Oliver Hunt.
    
            - test for http://bugs.webkit.org/show_bug.cgi?id=16603
              <rdar://problem/5664199> Crash when resizing text field
    
            * fast/layers/resize-layer-deletion-crash-expected.txt: Added.
            * fast/layers/resize-layer-deletion-crash.html: Added.
    
    
    
    git-svn-id: http://svn.webkit.org/repository/webkit/trunk@29010 268f45cc-cd09-0410-ab3c-d52691b4dbfc
    4f8770ab