Bommels05/Mozilla
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Bug 450876 - Crash [@ nsEventStateManager::GetNextTabbableMapArea] with img usemap and tabindex, r=Olli.Pettay, sr=roc, sr=dveditz (for 1.9.0.x), a=dveditz

Browse Source 
git-svn-id: svn://10.0.0.236/trunk@256309 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
martijn.martijn%gmail.com
2009-02-24 15:15:24 +00:00
parent 65c95f85b2
commit 463ab72594
3 changed files with 46 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
mozilla/content/events/src/nsEventStateManager.cpp
View File

@@ -3949,6 +3949,8 @@ nsEventStateManager::GetNextTabbableMapArea(PRBool aForward,
nsCOMPtr<nsIDocument> doc = aImageContent->GetDocument();
if (doc) {
nsCOMPtr<nsIDOMHTMLMapElement> imageMap = nsImageMapUtils::FindImageMap(doc, useMap);
if (!imageMap)
return nsnull;
nsCOMPtr<nsIContent> mapContent = do_QueryInterface(imageMap);
PRUint32 count = mapContent->GetChildCount();
// First see if mCurrentFocus is in this map

1
mozilla/content/events/test/Makefile.in
View File

@@ -58,6 +58,7 @@ _TEST_FILES = \
test_bug402089.html \
test_bug405632.html \
test_bug409604.html \
test_bug450876.html \
$(NULL)
_CHROME_FILES = \

43
mozilla/content/events/test/test_bug450876.html Normal file
View File

@@ -0,0 +1,43 @@
<html>
<!--
https://bugzilla.mozilla.org/show_bug.cgi?id=450876
-->
<head>
<title>Test for Bug 450876 - Crash [@ nsEventStateManager::GetNextTabbableMapArea] with img usemap and tabindex</title>
<script type="text/javascript" src="/MochiKit/MochiKit.js"></script>
<script type="text/javascript" src="/tests/SimpleTest/SimpleTest.js"></script>
<link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css" />
</head>
<body>
<a target="_blank" href="https://bugzilla.mozilla.org/show_bug.cgi?id=450876">Mozilla Bug 450876</a>
<p id="display"><a href="#" id="a">link to focus from</a><img usemap="#a" tabindex="1"></p>
<div id="content" style="display: none">
</div>
<pre id="test">
<script class="testbody" type="text/javascript">
/** Test for Bug 450876 **/
function doTest() {
netscape.security.PrivilegeManager.enablePrivilege("UniversalXPConnect");
is(document.activeElement, document.body, "body element should be focused");
document.getElementById('a').focus();
is(document.activeElement, document.getElementById('a'), "link should have focus");
var wu = window.QueryInterface(Components.interfaces.nsIInterfaceRequestor)
.getInterface(Components.interfaces.nsIDOMWindowUtils);
wu.sendKeyEvent('keypress', 9, 0, 0);
is(document.activeElement, document.body, "body element should be focused");
SimpleTest.finish();
}
SimpleTest.waitForExplicitFinish();
addLoadEvent(doTest);
</script>
</pre>
</body>
</html>