Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(271)

Issue 8333006: Merge 97667 - Re-landing: window.webkitNotifications uses deallocated NotificationPresenter after... (Closed)

Created:
9 years, 2 months ago by Dmitry Titov
Modified:
9 years, 2 months ago
Reviewers:
Dmitry Titov
CC:
chromium-reviews
Base URL:
http://svn.webkit.org/repository/webkit/branches/chromium/874/
Visibility:
Public.

Description

Merge 97667 - Re-landing: window.webkitNotifications uses deallocated NotificationPresenter after live Iframe transfer. https://bugs.webkit.org/show_bug.cgi?id=70147 Reviewed by David Levin. I only found a way to test this manually, since Chromium TestShell uses static instance of NotificationPresenter instead of per-page one so the issue does not reproduce. Adding manual test that works in full build of Chromium. * manual-tests/iframe_notifications/iframe-reparenting-close-window-child.html: Added. * manual-tests/iframe_notifications/iframe-reparenting-close-window-iframe.html: Added. * manual-tests/iframe_notifications/iframe-reparenting-close-window.html: Added. * notifications/NotificationCenter.cpp: (WebCore::NotificationCenter::disconnectFrame): * page/DOMWindow.cpp: (WebCore::DOMWindow::resetNotifications): * page/DOMWindow.h: * page/Frame.cpp: (WebCore::Frame::transferChildFrameToNewDocument): reset webkitNotifications object. TBR=dimich@chromium.org Committed: http://src.chromium.org/viewvc/chrome?view=rev&revision=97674

Patch Set 1 #

Unified diffs Side-by-side diffs Delta from patch set Stats (+20 lines, -10 lines) Patch
M Source/WebCore/notifications/NotificationCenter.cpp View 1 chunk +2 lines, -3 lines 0 comments Download
M Source/WebCore/page/DOMWindow.h View 1 chunk +3 lines, -0 lines 0 comments Download
M Source/WebCore/page/DOMWindow.cpp View 3 chunks +10 lines, -6 lines 0 comments Download
M Source/WebCore/page/Frame.cpp View 1 chunk +5 lines, -1 line 0 comments Download

Messages

Total messages: 1 (0 generated)
Dmitry Titov
9 years, 2 months ago (2011-10-17 23:49:56 UTC) #1

          

Powered by Google App Engine
This is Rietveld 408576698