Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(1480)

Issue 2172133002: Fix a crash caused by changing dir attribute of a slot element (Closed)

Created:
4 years, 5 months ago by hayato
Modified:
4 years, 5 months ago
Reviewers:
tkent, kochi
CC:
blink-reviews, blink-reviews-html_chromium.org, chromium-reviews, dglazkov+blink
Base URL:
https://chromium.googlesource.com/chromium/src.git@master
Target Ref:
refs/pending/heads/master
Project:
chromium
Visibility:
Public.

Description

Fix a crash caused by changing dir attribute of a slot element HTMLElement::dirAttributeChaged() calls FlatTreeTraversal::parent(*this) unconditionally. Since Blink does not support "slots in a flat tree", we should return early here for a slot element. BUG=627385 Committed: https://crrev.com/c75de11273c24c2a26738c5298074dac079b1016 Cr-Commit-Position: refs/heads/master@{#407108}

Patch Set 1 #

Total comments: 2
Unified diffs Side-by-side diffs Delta from patch set Stats (+13 lines, -0 lines) Patch
A third_party/WebKit/LayoutTests/shadow-dom/crashes/slot-dir-attribute-crash.html View 1 chunk +11 lines, -0 lines 0 comments Download
M third_party/WebKit/Source/core/html/HTMLElement.cpp View 1 chunk +2 lines, -0 lines 2 comments Download

Messages

Total messages: 14 (8 generated)
hayato
PTAL
4 years, 5 months ago (2016-07-22 06:07:54 UTC) #5
kochi
lgtm https://codereview.chromium.org/2172133002/diff/1/third_party/WebKit/Source/core/html/HTMLElement.cpp File third_party/WebKit/Source/core/html/HTMLElement.cpp (right): https://codereview.chromium.org/2172133002/diff/1/third_party/WebKit/Source/core/html/HTMLElement.cpp#newcode781 third_party/WebKit/Source/core/html/HTMLElement.cpp:781: return; nit: The comment above and these 2 ...
4 years, 5 months ago (2016-07-22 07:41:33 UTC) #8
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.org/2172133002/1
4 years, 5 months ago (2016-07-22 09:09:30 UTC) #10
commit-bot: I haz the power
Committed patchset #1 (id:1)
4 years, 5 months ago (2016-07-22 09:12:52 UTC) #11
commit-bot: I haz the power
Patchset 1 (id:??) landed as https://crrev.com/c75de11273c24c2a26738c5298074dac079b1016 Cr-Commit-Position: refs/heads/master@{#407108}
4 years, 5 months ago (2016-07-22 09:14:16 UTC) #13
hayato
4 years, 5 months ago (2016-07-22 09:59:36 UTC) #14
Message was sent while issue was closed.
https://codereview.chromium.org/2172133002/diff/1/third_party/WebKit/Source/c...
File third_party/WebKit/Source/core/html/HTMLElement.cpp (right):

https://codereview.chromium.org/2172133002/diff/1/third_party/WebKit/Source/c...
third_party/WebKit/Source/core/html/HTMLElement.cpp:781: return;
On 2016/07/22 at 07:41:33, kochi wrote:
> nit: The comment above and these 2 lines are not related, maybe swap
> 778-779 and 780-781?

Ah. Thanks, but I did not think so. I thought that this comment is applied to
all of this function.
Let me leave this as is.

Powered by Google App Engine
This is Rietveld 408576698