• andersca@apple.com's avatar
    2011-02-20 Anders Carlsson <andersca@apple.com> · 6d80e246
    andersca@apple.com authored
            Reviewed by Maciej Stachowiak.
    
            Crash when a plug-in requests a javascript: url that destroys the plug-in
            https://bugs.webkit.org/show_bug.cgi?id=54837
            <rdar://problem/9005475>
    
            Add new plug-in test.
    
            * DumpRenderTree/DumpRenderTree.gypi:
            * DumpRenderTree/DumpRenderTree.xcodeproj/project.pbxproj:
            * DumpRenderTree/TestNetscapePlugIn/PluginTest.cpp:
            (PluginTest::NPN_GetURL):
            * DumpRenderTree/TestNetscapePlugIn/PluginTest.h:
            * DumpRenderTree/TestNetscapePlugIn/Tests/GetURLWithJavaScriptURLDestroyingPlugin.cpp: Added.
            (GetURLWithJavaScriptURLDestroyingPlugin::GetURLWithJavaScriptURLDestroyingPlugin):
            (GetURLWithJavaScriptURLDestroyingPlugin::NPP_New):
            * DumpRenderTree/TestNetscapePlugIn/win/TestNetscapePlugin.vcproj:
            * DumpRenderTree/qt/TestNetscapePlugin/TestNetscapePlugin.pro:
    2011-02-20  Anders Carlsson  <andersca@apple.com>
    
            Reviewed by Maciej Stachowiak.
    
            Crash when a plug-in requests a javascript: url that destroys the plug-in
            https://bugs.webkit.org/show_bug.cgi?id=54837
            <rdar://problem/9005475>
    
            Add test.
    
            * plugins/get-url-with-javascript-destroying-plugin-expected.txt: Added.
            * plugins/get-url-with-javascript-destroying-plugin.html: Added.
    2011-02-20  Anders Carlsson  <andersca@apple.com>
    
            Reviewed by Maciej Stachowiak.
    
            Crash when a plug-in requests a javascript: url that destroys the plug-in
            https://bugs.webkit.org/show_bug.cgi?id=54837
            <rdar://problem/9005475>
    
            * WebProcess/Plugins/PluginProxy.cpp:
            (WebKit::PluginProxy::destroy):
            Null out m_pluginController.
    
            * WebProcess/Plugins/PluginView.cpp:
            (WebKit::PluginView::performJavaScriptURLRequest):
            Don't access the frame through m_pluginElement since it will be nulled out
            when the plug-in is destroyed.
    
    
    git-svn-id: http://svn.webkit.org/repository/webkit/trunk@79157 268f45cc-cd09-0410-ab3c-d52691b4dbfc
    6d80e246
get-url-with-javascript-destroying-plugin-expected.txt 132 Bytes