-
ddkilzer authored
Reviewed by Darin. Patch by Mitz. - test for http://bugs.webkit.org/show_bug.cgi?id=8360 Repro crash when onscroll handler deletes the scrolled object * fast/layers/removed-by-scroll-handler-expected.checksum: Added. * fast/layers/removed-by-scroll-handler-expected.png: Added. * fast/layers/removed-by-scroll-handler-expected.txt: Added. * fast/layers/removed-by-scroll-handler.html: Added. WebCore: Reviewed by Darin. Patch by Mitz. - fix http://bugs.webkit.org/show_bug.cgi?id=8360 Repro crash when onscroll handler deletes the scrolled object Test: fast/layers/removed-by-scroll-handler.html * page/FrameView.cpp: (WebCore::FrameViewPrivate::FrameViewPrivate): Added a m_enqueueEvents count. (WebCore::FrameView::layout): Raise the enqueue count before starting layout and until after enqueued events are dispatched. (WebCore::FrameView::scheduleEvent): Made this function dispatch the event immediately unless the enqueue count is positive. * rendering/RenderLayer.cpp: (WebCore::RenderLayer::scrollToOffset): Schedule the scroll event through the FrameView. (WebCore::RenderLayer::scrollRectToVisible): (WebCore::RenderLayer::updateScrollInfoAfterLayout): (WebCore::Marquee::start): git-svn-id: http://svn.webkit.org/repository/webkit/trunk@19204 268f45cc-cd09-0410-ab3c-d52691b4dbfc
667cffa5