Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(239)

Side by Side Diff: Source/WebCore/svg/SVGTRefElement.h

Issue 8015009: Merge 95791 - use after free in WebCore::SVGTRefElement::updateReferencedText (Closed) Base URL: http://svn.webkit.org/repository/webkit/branches/chromium/874/
Patch Set: Created 9 years, 3 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 /* 1 /*
2 * Copyright (C) 2004, 2005, 2008 Nikolas Zimmermann <zimmermann@kde.org> 2 * Copyright (C) 2004, 2005, 2008 Nikolas Zimmermann <zimmermann@kde.org>
3 * Copyright (C) 2004, 2005, 2006 Rob Buis <buis@kde.org> 3 * Copyright (C) 2004, 2005, 2006 Rob Buis <buis@kde.org>
4 * 4 *
5 * This library is free software; you can redistribute it and/or 5 * This library is free software; you can redistribute it and/or
6 * modify it under the terms of the GNU Library General Public 6 * modify it under the terms of the GNU Library General Public
7 * License as published by the Free Software Foundation; either 7 * License as published by the Free Software Foundation; either
8 * version 2 of the License, or (at your option) any later version. 8 * version 2 of the License, or (at your option) any later version.
9 * 9 *
10 * This library is distributed in the hope that it will be useful, 10 * This library is distributed in the hope that it will be useful,
(...skipping 29 matching lines...) Expand all
40 SVGTRefElement(const QualifiedName&, Document*); 40 SVGTRefElement(const QualifiedName&, Document*);
41 41
42 bool isSupportedAttribute(const QualifiedName&); 42 bool isSupportedAttribute(const QualifiedName&);
43 virtual void parseMappedAttribute(Attribute*); 43 virtual void parseMappedAttribute(Attribute*);
44 virtual void svgAttributeChanged(const QualifiedName&); 44 virtual void svgAttributeChanged(const QualifiedName&);
45 45
46 virtual RenderObject* createRenderer(RenderArena*, RenderStyle*); 46 virtual RenderObject* createRenderer(RenderArena*, RenderStyle*);
47 virtual bool childShouldCreateRenderer(Node*) const; 47 virtual bool childShouldCreateRenderer(Node*) const;
48 virtual bool rendererIsNeeded(const NodeRenderingContext&); 48 virtual bool rendererIsNeeded(const NodeRenderingContext&);
49 49
50 virtual void insertedIntoDocument();
50 virtual void removedFromDocument(); 51 virtual void removedFromDocument();
51 52
52 void updateReferencedText(); 53 void updateReferencedText();
53 54
54 virtual void buildPendingResource(); 55 virtual void buildPendingResource();
55 56
56 BEGIN_DECLARE_ANIMATED_PROPERTIES(SVGTRefElement) 57 BEGIN_DECLARE_ANIMATED_PROPERTIES(SVGTRefElement)
57 DECLARE_ANIMATED_STRING(Href, href) 58 DECLARE_ANIMATED_STRING(Href, href)
58 END_DECLARE_ANIMATED_PROPERTIES 59 END_DECLARE_ANIMATED_PROPERTIES
59 60
60 RefPtr<SubtreeModificationEventListener> m_eventListener; 61 RefPtr<SubtreeModificationEventListener> m_eventListener;
61 }; 62 };
62 63
63 } // namespace WebCore 64 } // namespace WebCore
64 65
65 #endif // ENABLE(SVG) 66 #endif // ENABLE(SVG)
66 #endif 67 #endif
OLDNEW
« no previous file with comments | « LayoutTests/svg/custom/tref-clone-crash-expected.txt ('k') | Source/WebCore/svg/SVGTRefElement.cpp » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698