Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(125)

Side by Side Diff: LayoutTests/accessibility/container-node-delete-causes-crash-expected.txt

Issue 11196044: Merge 130266 - AX: Heap-use-after-free when deleting a ContainerNode with an AX object (Closed) Base URL: http://svn.webkit.org/repository/webkit/branches/chromium/1271/
Patch Set: Created 8 years, 2 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 Checks to make sure a heap-use-after-free crash doesn't occur when a container n ode with an associated accessibility object is deleted from the tree. The heap-u se-after free was occuring when the AccessibilityObject corresponding to the chi ld of the text node walked up its parent chain in AccessibilityObject::supportsA RIALiveRegion but its parent was already deleted. 1 Checks to make sure a heap-use-after-free crash doesn't occur when a container n ode with an associated accessibility object is deleted from the tree. The heap-u se-after free was occuring when the AccessibilityObject corresponding to the chi ld of the text node walked up its parent chain in AccessibilityObject::supportsA RIALiveRegion but its parent was already deleted.
2 2
3 On success, you will see a series of "PASS" messages, followed by "TEST COMPLETE ". 3 On success, you will see a series of "PASS" messages, followed by "TEST COMPLETE ".
4 4
5 5
6 PASS successfullyParsed is true 6 PASS successfullyParsed is true
7 7
8 TEST COMPLETE 8 TEST COMPLETE
9 Text 9 Text
10 10
OLDNEW
« no previous file with comments | « LayoutTests/accessibility/container-node-delete-causes-crash.html ('k') | Source/WebCore/dom/ContainerNode.cpp » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698