DescriptionCrash test for 400997.
Scrollbars can be kept alive referenced from the EventHandler after they
have been detached from their ScrollableAreas (through
m_lastScrollbarUnderMouse and m_scrollbarHandlingScrollGesture).
EventHandler may call setHoveredPart and setPressedPart on custom scroll-
bars (LayoutScrollbar) on mouse moves after these bars have been detached
from their scrollable areas. Those methods recalculate style for custom
scrollbar pseudo elements. That caused a crash in SelectorChecker for
the :corner-present pseudo class because it used the scrollableArea()
from Scrollbar without null-checking it.
The null-check was added as a speculative fix in r191244. This CL adds a
test which causes that crasher.
R=keishi@chromium.org,tkent@chromium.org
BUG=400997
Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=191278
Patch Set 1 #
Messages
Total messages: 5 (1 generated)
|