Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(331)

Issue 2844593002: Protect against lifecycle updates that delete a layout object for autoscroll (Closed)

Created:
3 years, 8 months ago by chrishtr
Modified:
3 years, 7 months ago
CC:
blink-reviews, blink-reviews-html_chromium.org, chromium-reviews, dglazkov+blink, dtapuska+blinkwatch_chromium.org, Navid Zolghadr
Target Ref:
refs/heads/master
Project:
chromium
Visibility:
Public.

Description

Protect against lifecycle updates that delete a layout object for autoscroll. NOPRESUBMIT=true BUG=713190 Review-Url: https://codereview.chromium.org/2844593002 Cr-Commit-Position: refs/heads/master@{#468109} Committed: https://chromium.googlesource.com/chromium/src/+/e5b83af160ffb15e52163318bdd3aadb14c185c8

Patch Set 1 #

Patch Set 2 : none #

Total comments: 3

Patch Set 3 : none #

Patch Set 4 : none #

Patch Set 5 : none #

Total comments: 8

Patch Set 6 : none #

Patch Set 7 : none #

Total comments: 2

Patch Set 8 : none #

Total comments: 1
Unified diffs Side-by-side diffs Delta from patch set Stats (+50 lines, -6 lines) Patch
A third_party/WebKit/LayoutTests/fast/events/autoscroll-select-crash.html View 1 2 3 4 5 6 7 1 chunk +35 lines, -0 lines 1 comment Download
M third_party/WebKit/Source/core/html/HTMLSelectElement.cpp View 1 2 3 4 5 1 chunk +5 lines, -1 line 0 comments Download
M third_party/WebKit/Source/core/input/MouseEventManager.cpp View 1 2 3 4 5 2 chunks +10 lines, -3 lines 0 comments Download
M third_party/WebKit/Source/core/page/AutoscrollController.cpp View 1 chunk +0 lines, -2 lines 0 comments Download

Messages

Total messages: 52 (33 generated)
chrishtr
3 years, 8 months ago (2017-04-26 00:20:09 UTC) #5
mstensho (USE GERRIT)
I think we need a test case. https://codereview.chromium.org/2844593002/diff/20001/third_party/WebKit/Source/core/html/HTMLSelectElement.cpp File third_party/WebKit/Source/core/html/HTMLSelectElement.cpp (right): https://codereview.chromium.org/2844593002/diff/20001/third_party/WebKit/Source/core/html/HTMLSelectElement.cpp#newcode1521 third_party/WebKit/Source/core/html/HTMLSelectElement.cpp:1521: if (LayoutObject* ...
3 years, 8 months ago (2017-04-26 09:46:28 UTC) #8
chrishtr
On 2017/04/26 at 09:46:28, mstensho wrote: > I think we need a test case. Done. ...
3 years, 8 months ago (2017-04-26 23:11:01 UTC) #9
chrishtr
https://codereview.chromium.org/2844593002/diff/20001/third_party/WebKit/Source/core/html/HTMLSelectElement.cpp File third_party/WebKit/Source/core/html/HTMLSelectElement.cpp (right): https://codereview.chromium.org/2844593002/diff/20001/third_party/WebKit/Source/core/html/HTMLSelectElement.cpp#newcode1521 third_party/WebKit/Source/core/html/HTMLSelectElement.cpp:1521: if (LayoutObject* object = GetLayoutObject()) On 2017/04/26 at 09:46:28, ...
3 years, 8 months ago (2017-04-26 23:11:06 UTC) #10
mstensho (USE GERRIT)
https://codereview.chromium.org/2844593002/diff/20001/third_party/WebKit/Source/core/html/HTMLSelectElement.cpp File third_party/WebKit/Source/core/html/HTMLSelectElement.cpp (right): https://codereview.chromium.org/2844593002/diff/20001/third_party/WebKit/Source/core/html/HTMLSelectElement.cpp#newcode1521 third_party/WebKit/Source/core/html/HTMLSelectElement.cpp:1521: if (LayoutObject* object = GetLayoutObject()) On 2017/04/26 23:11:06, chrishtr ...
3 years, 7 months ago (2017-04-27 20:16:11 UTC) #23
chrishtr
Everything now done, except that the test doesn't work with chrome.gpuBenchmarking.pointerActionSequence, which I am now ...
3 years, 7 months ago (2017-04-28 02:21:35 UTC) #25
dtapuska
On 2017/04/28 02:21:35, chrishtr wrote: > Everything now done, except that the test doesn't work ...
3 years, 7 months ago (2017-04-28 02:34:45 UTC) #28
mstensho (USE GERRIT)
Yeah, chrome.gpuBenchmarking.pointerActionSequence() sure is a strange way of firing mouse events (eventSender sort of was ...
3 years, 7 months ago (2017-04-28 07:46:48 UTC) #31
chrishtr
On 2017/04/28 at 07:46:48, mstensho wrote: > Yeah, chrome.gpuBenchmarking.pointerActionSequence() sure is a strange way of ...
3 years, 7 months ago (2017-04-28 15:48:11 UTC) #32
chrishtr
On 2017/04/28 at 02:34:45, dtapuska wrote: > On 2017/04/28 02:21:35, chrishtr wrote: > > Everything ...
3 years, 7 months ago (2017-04-28 15:48:58 UTC) #33
dtapuska
On 2017/04/28 15:48:58, chrishtr wrote: > On 2017/04/28 at 02:34:45, dtapuska wrote: > > On ...
3 years, 7 months ago (2017-04-28 15:58:59 UTC) #36
lanwei
https://codereview.chromium.org/2844593002/diff/120001/third_party/WebKit/LayoutTests/fast/events/autoscroll-select-crash.html File third_party/WebKit/LayoutTests/fast/events/autoscroll-select-crash.html (right): https://codereview.chromium.org/2844593002/diff/120001/third_party/WebKit/LayoutTests/fast/events/autoscroll-select-crash.html#newcode30 third_party/WebKit/LayoutTests/fast/events/autoscroll-select-crash.html:30: setTimeout(moveGesture, 50); Unfortunately, pointerActionSequence API expects the actions are ...
3 years, 7 months ago (2017-04-28 16:17:30 UTC) #37
chrishtr
Updated. Now skips presubmit to allow eventSender. All other comments have been addressed, PTAL.
3 years, 7 months ago (2017-04-28 18:11:29 UTC) #39
dtapuska
https://codereview.chromium.org/2844593002/diff/120001/third_party/WebKit/LayoutTests/fast/events/autoscroll-select-crash.html File third_party/WebKit/LayoutTests/fast/events/autoscroll-select-crash.html (right): https://codereview.chromium.org/2844593002/diff/120001/third_party/WebKit/LayoutTests/fast/events/autoscroll-select-crash.html#newcode30 third_party/WebKit/LayoutTests/fast/events/autoscroll-select-crash.html:30: setTimeout(moveGesture, 50); On 2017/04/28 16:17:29, lanwei wrote: > Unfortunately, ...
3 years, 7 months ago (2017-04-28 18:17:02 UTC) #43
chrishtr
On 2017/04/28 at 18:17:02, dtapuska wrote: > https://codereview.chromium.org/2844593002/diff/120001/third_party/WebKit/LayoutTests/fast/events/autoscroll-select-crash.html > File third_party/WebKit/LayoutTests/fast/events/autoscroll-select-crash.html (right): > > https://codereview.chromium.org/2844593002/diff/120001/third_party/WebKit/LayoutTests/fast/events/autoscroll-select-crash.html#newcode30 ...
3 years, 7 months ago (2017-04-28 18:42:02 UTC) #44
dtapuska
On 2017/04/28 18:42:02, chrishtr wrote: > On 2017/04/28 at 18:17:02, dtapuska wrote: > > > ...
3 years, 7 months ago (2017-04-28 18:49:45 UTC) #45
mstensho (USE GERRIT)
lgtm https://codereview.chromium.org/2844593002/diff/140001/third_party/WebKit/LayoutTests/fast/events/autoscroll-select-crash.html File third_party/WebKit/LayoutTests/fast/events/autoscroll-select-crash.html (right): https://codereview.chromium.org/2844593002/diff/140001/third_party/WebKit/LayoutTests/fast/events/autoscroll-select-crash.html#newcode21 third_party/WebKit/LayoutTests/fast/events/autoscroll-select-crash.html:21: setTimeout(moveGesture, 50); Looks like this timeout is slightly ...
3 years, 7 months ago (2017-04-28 20:15:29 UTC) #46
commit-bot: I haz the power
CQ is trying da patch. Follow status at: https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.org/2844593002/140001
3 years, 7 months ago (2017-04-28 20:18:37 UTC) #49
commit-bot: I haz the power
3 years, 7 months ago (2017-04-28 20:22:28 UTC) #52
Message was sent while issue was closed.
Committed patchset #8 (id:140001) as
https://chromium.googlesource.com/chromium/src/+/e5b83af160ffb15e52163318bdd3...

Powered by Google App Engine
This is Rietveld 408576698