Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(69)

Issue 2811333003: Remove ClearSelection() from Layout{BlockFlow,Inline}::WillbeDestroyed() (Closed)

Created:
3 years, 8 months ago by yoichio
Modified:
3 years, 8 months ago
Reviewers:
kojih, yosin_UTC9, eae
CC:
blink-reviews, blink-reviews-layout_chromium.org, chromium-reviews, eae+blinkwatch, jchaffraix+rendering, leviw+renderwatch, pdr+renderingwatchlist_chromium.org, szager+layoutwatch_chromium.org, zoltan1
Target Ref:
refs/heads/master
Project:
chromium
Visibility:
Public.

Description

Remove ClearSelection() from Layout{BlockFlow,Inline}::WillbeDestroyed() LayoutView::ClearSelection was originally introduced at 2004 to assure no crash: https://chromium.googlesource.com/chromium/src/+/10f7ac6ea6784e33161c7979e9a59c5e2cae14b5 Even now that code doesn't make sense because we update LayoutSelection after layout in following sequence: 1. FrameView::PerformPostLayoutTasks() checks LayoutSelection::SetHasPendingSelection() 2. PaintLayerCompositor::UpdateIfNeededRecursiveInternal() calls LayoutSelection::Commit() and it updates layout selection. BUG=708453 Review-Url: https://codereview.chromium.org/2811333003 Cr-Commit-Position: refs/heads/master@{#464352} Committed: https://chromium.googlesource.com/chromium/src/+/230b4e0eb7f14d23c70bc4134b8a23a9ddccd5a8

Patch Set 1 #

Unified diffs Side-by-side diffs Delta from patch set Stats (+0 lines, -14 lines) Patch
M third_party/WebKit/Source/core/layout/LayoutBlockFlow.cpp View 1 chunk +0 lines, -7 lines 0 comments Download
M third_party/WebKit/Source/core/layout/LayoutInline.cpp View 1 chunk +0 lines, -7 lines 0 comments Download

Messages

Total messages: 16 (10 generated)
yoichio
3 years, 8 months ago (2017-04-13 08:58:14 UTC) #7
eae
OK, LGTM
3 years, 8 months ago (2017-04-13 09:03:59 UTC) #9
yosin_UTC9
lgtm Good reasoning.
3 years, 8 months ago (2017-04-13 09:04:28 UTC) #10
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.org/2811333003/1
3 years, 8 months ago (2017-04-13 09:05:48 UTC) #12
commit-bot: I haz the power
Committed patchset #1 (id:1) as https://chromium.googlesource.com/chromium/src/+/230b4e0eb7f14d23c70bc4134b8a23a9ddccd5a8
3 years, 8 months ago (2017-04-13 09:10:29 UTC) #15
yoichio
3 years, 4 months ago (2017-07-27 07:40:01 UTC) #16
Message was sent while issue was closed.
A revert of this CL (patchset #1 id:1) has been created in
https://codereview.chromium.org/2988003002/ by yoichio@chromium.org.

The reason for reverting is: This causes use-after-free:
crbug.com/748718.

Powered by Google App Engine
This is Rietveld 408576698