Fix ASan container overflow in HTMLMenuItemElement::defaultEventHandler

Fix ASan container overflow in HTMLMenuItemElement::defaultEventHandler

The root cause is the AtomicString const reference |group|.  This reference will be broken after removeAttribute(checkedAttr) is called for the same element.

BUG=590619
Committed: https://crrev.com/4189a821a05342bf177d00744175e367dba67868
Cr-Commit-Position: refs/heads/master@{#392584}

[pals, 2016-05-10 05:57:23]

Description was changed from

==========
Fix ASan container overflow in HTMLMenuItemElement::defaultEventHandler

The root cause is the AtomicString const reference |group|.  This reference will
be broken after removeAttribute(checkedAttr) is called for the same element.

BUG=590619
==========

to

==========
Fix ASan container overflow in HTMLMenuItemElement::defaultEventHandler

The root cause is the AtomicString const reference |group|.  This reference will
be broken after removeAttribute(checkedAttr) is called for the same element.

BUG=590619
==========

[pals, 2016-05-10 05:57:23]

sanjoy.pal@samsung.com changed reviewers:
+ tkent@chromium.org

[pals, 2016-05-10 05:58:59]

Please take a look.

[tkent, 2016-05-10 06:38:32]

Please add a test.

[pals, 2016-05-10 08:57:10]

On 2016/05/10 06:38:32, tkent wrote:
> Please add a test.

Added a test. PTAL.

[pals, 2016-05-10 08:57:23]

The CQ bit was checked by sanjoy.pal@samsung.com to run a CQ dry run

[commit-bot: I haz the power, 2016-05-10 08:57:33]

Dry run: CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/1962073003/20001
View timeline at
 https://chromium-cq-status.appspot.com/patch-timeline/1962073003/20001

[tkent, 2016-05-10 11:56:11]

lgtm

[commit-bot: I haz the power, 2016-05-10 12:14:35]

The CQ bit was unchecked by commit-bot@chromium.org

[commit-bot: I haz the power, 2016-05-10 12:14:36]

Dry run: This issue passed the CQ dry run.

[pals, 2016-05-10 12:15:17]

The CQ bit was checked by sanjoy.pal@samsung.com

[commit-bot: I haz the power, 2016-05-10 12:15:25]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/1962073003/20001
View timeline at
 https://chromium-cq-status.appspot.com/patch-timeline/1962073003/20001

[commit-bot: I haz the power, 2016-05-10 12:18:40]

Description was changed from

==========
Fix ASan container overflow in HTMLMenuItemElement::defaultEventHandler

The root cause is the AtomicString const reference |group|.  This reference will
be broken after removeAttribute(checkedAttr) is called for the same element.

BUG=590619
==========

to

==========
Fix ASan container overflow in HTMLMenuItemElement::defaultEventHandler

The root cause is the AtomicString const reference |group|.  This reference will
be broken after removeAttribute(checkedAttr) is called for the same element.

BUG=590619
==========

[commit-bot: I haz the power, 2016-05-10 12:18:41]

Committed patchset #2 (id:20001)

[commit-bot: I haz the power, 2016-05-10 12:19:56]

Description was changed from

==========
Fix ASan container overflow in HTMLMenuItemElement::defaultEventHandler

The root cause is the AtomicString const reference |group|.  This reference will
be broken after removeAttribute(checkedAttr) is called for the same element.

BUG=590619
==========

to

==========
Fix ASan container overflow in HTMLMenuItemElement::defaultEventHandler

The root cause is the AtomicString const reference |group|.  This reference will
be broken after removeAttribute(checkedAttr) is called for the same element.

BUG=590619

Committed: https://crrev.com/4189a821a05342bf177d00744175e367dba67868
Cr-Commit-Position: refs/heads/master@{#392584}
==========

[commit-bot: I haz the power, 2016-05-10 12:19:57]

Patchset 2 (id:??) landed as
https://crrev.com/4189a821a05342bf177d00744175e367dba67868
Cr-Commit-Position: refs/heads/master@{#392584}