Bug 432114. Change style sheet owner to the document being edited. Patch from Chris Pearce <chris@pearce.org.nz>. r+sr=peterv a=dveditz
git-svn-id: svn://10.0.0.236/trunk@256567 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
8
mozilla/docshell/base/crashtests/432114-1.html
Normal file
8
mozilla/docshell/base/crashtests/432114-1.html
Normal file
@@ -0,0 +1,8 @@
|
||||
<html>
|
||||
<head>
|
||||
<title>Bug - Crash [@ PL_DHashTableOperate] with DOMNodeInserted event listener removing window and frameset contenteditable</title>
|
||||
</head>
|
||||
<body>
|
||||
<iframe id="content" src="data:text/html;charset=utf-8,%3Cscript%3E%0Awindow.addEventListener%28%27DOMNodeInserted%27%2C%20function%28%29%20%7Bwindow.frameElement.parentNode.removeChild%28window.frameElement%29%3B%7D%2C%20true%29%3B%0A%3C/script%3E%0A%3Cframeset%20contenteditable%3D%22true%22%3E"></iframe>
|
||||
</body>
|
||||
</html>
|
||||
9
mozilla/docshell/base/crashtests/432114-2.html
Normal file
9
mozilla/docshell/base/crashtests/432114-2.html
Normal file
@@ -0,0 +1,9 @@
|
||||
<html>
|
||||
<head>
|
||||
<title>testcase2 Bug 432114 Crash [@ PL_DHashTableOperate] with DOMNodeInserted event listener removing window and frameset contenteditable</title>
|
||||
</head>
|
||||
<body>
|
||||
<iframe id="content" src="data:application/xhtml+xml;charset=utf-8,%3Chtml%20xmlns%3D%22http%3A//www.w3.org/1999/xhtml%22%3E%0A%3Cframeset%20contenteditable%3D%22true%22/%3E%0A%3Cscript%3E%0Afunction%20doExecCommand%28%29%7B%0Adocument.execCommand%28%27insertParagraph%27%2C%20false%2C%20%27%27%29%3B%0A%7D%0AsetTimeout%28doExecCommand%2C100%29%3B%0Awindow.addEventListener%28%27DOMNodeRemoved%27%2C%20function%28%29%20%7Bwindow.frameElement.parentNode.removeChild%28window.frameElement%29%3B%7D%2C%20true%29%3B%0A%3C/script%3E%0A%3C/html%3E" style="width:1000px;height: 200px;"></iframe>
|
||||
|
||||
</body>
|
||||
</html>
|
||||
@@ -1,2 +1,4 @@
|
||||
load 369126-1.html
|
||||
load 403574-1.xhtml
|
||||
load 432114-1.html
|
||||
load 432114-2.html
|
||||
|
||||
@@ -588,18 +588,16 @@ nsWebShell::EnsureCommandHandler()
|
||||
{
|
||||
if (!mCommandManager)
|
||||
{
|
||||
mCommandManager = do_CreateInstance("@mozilla.org/embedcomp/command-manager;1");
|
||||
if (!mCommandManager) return NS_ERROR_OUT_OF_MEMORY;
|
||||
nsCOMPtr<nsPICommandUpdater> commandUpdater =
|
||||
do_CreateInstance("@mozilla.org/embedcomp/command-manager;1");
|
||||
if (!commandUpdater) return NS_ERROR_OUT_OF_MEMORY;
|
||||
|
||||
nsCOMPtr<nsPICommandUpdater> commandUpdater = do_QueryInterface(mCommandManager);
|
||||
if (!commandUpdater) return NS_ERROR_FAILURE;
|
||||
|
||||
nsCOMPtr<nsIDOMWindow> domWindow = do_GetInterface(static_cast<nsIInterfaceRequestor *>(this));
|
||||
#ifdef DEBUG
|
||||
nsresult rv =
|
||||
#endif
|
||||
commandUpdater->Init(domWindow);
|
||||
NS_ASSERTION(NS_SUCCEEDED(rv), "Initting command manager failed");
|
||||
nsCOMPtr<nsIDOMWindow> domWindow =
|
||||
do_GetInterface(static_cast<nsIInterfaceRequestor *>(this));
|
||||
|
||||
nsresult rv = commandUpdater->Init(domWindow);
|
||||
if (NS_SUCCEEDED(rv))
|
||||
mCommandManager = do_QueryInterface(commandUpdater);
|
||||
}
|
||||
|
||||
return mCommandManager ? NS_OK : NS_ERROR_FAILURE;
|
||||
|
||||
Reference in New Issue
Block a user