-
simon.fraser@apple.com authored
Reviewed by Dan Bernstein. <rdar://problem/7047282> Safari crashes at WebCore::RenderMenuList::adjustInnerStyle() + 436 Avoid a crash when a mouse event handler on a <select> changes the select from a popup to a list (by setting the 'size' property) inside the event handler. Test: fast/forms/select-change-popup-to-listbox-in-event-handler.html * dom/SelectElement.cpp: (WebCore::SelectElement::menuListDefaultEventHandler): git-svn-id: http://svn.webkit.org/repository/webkit/trunk@48376 268f45cc-cd09-0410-ab3c-d52691b4dbfc
d15e7113