122032 2013-09-27 14:26:02 -0700 ASSERT(!m_hasBadParent) in InlineBox::parent() should be ASSERT_WITH_SECURITY_IMPLICATION 2013-09-30 14:54:48 -0700 1 1 1 Unclassified WebKit Layout and Rendering 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED P2 Normal --- 1 ayao ayao commit-queue esprehn+autocc glenn kondapallykalyan oldest_to_newest 934087 0 ayao 2013-09-27 14:26:02 -0700 Source/WebCore/rendering/InlineBox.h: InlineFlowBox* parent() const { ASSERT(!m_hasBadParent); return m_parent; } ASSERT(!m_hasBadParent) in InlineBox::parent() should be ASSERT_WITH_SECURITY_IMPLICATION. Its sole purpose is to catch use after free bugs. 934093 1 212841 ayao 2013-09-27 14:39:19 -0700 Created attachment 212841 Patch 934825 2 212841 commit-queue 2013-09-30 14:54:46 -0700 Comment on attachment 212841 Patch Clearing flags on attachment: 212841 Committed r156682: <http://trac.webkit.org/changeset/156682> 934826 3 commit-queue 2013-09-30 14:54:48 -0700 All reviewed patches have been landed. Closing bug. 212841 2013-09-27 14:39:19 -0700 2013-09-30 14:54:46 -0700 Patch bug-122032-20130927143919.patch text/plain 1267 ayao SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDE1NjU3NSkKKysrIFNvdXJjZS9XZWJDb3JlL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE3IEBACisyMDEzLTA5LTI3ICBEcmV3IFlh byAgPGF5YW9AYXBwbGUuY29tPgorCisgICAgICAgIEFTU0VSVCghbV9oYXNCYWRQYXJlbnQpIGlu IElubGluZUJveDo6cGFyZW50KCkgc2hvdWxkIGJlIEFTU0VSVF9XSVRIX1NFQ1VSSVRZX0lNUExJ Q0FUSU9OCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0x MjIwMzIKKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBD b252ZXJ0IGFzc2VydGlvbiB0byBBU1NFUlRfV0lUSF9TRUNVUklUWV9JTVBMSUNBVElPTiB0byBo ZWxwIGNhdGNoIHVzZSBhZnRlciBmcmVlIGJ1Z3MuCisKKyAgICAgICAgTm8gbmV3IHRlc3RzIG5l ZWRlZC4KKworICAgICAgICAqIHJlbmRlcmluZy9JbmxpbmVCb3guaDoKKyAgICAgICAgKFdlYkNv cmU6OklubGluZUJveDo6cGFyZW50KToKKwogMjAxMy0wOS0yNyAgVGhpYWdvIGRlIEJhcnJvcyBM YWNlcmRhICA8dGhpYWdvLmxhY2VyZGFAb3BlbmJvc3NhLm9yZz4KIAogICAgICAgICBHZXQgTWVk aWFTdHJlYW1DZW50ZXJHU3RyZWFtZXIgY29tcGlsaW5nIGFnYWluCkluZGV4OiBTb3VyY2UvV2Vi Q29yZS9yZW5kZXJpbmcvSW5saW5lQm94LmgKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291cmNlL1dlYkNvcmUv cmVuZGVyaW5nL0lubGluZUJveC5oCShyZXZpc2lvbiAxNTY1NTcpCisrKyBTb3VyY2UvV2ViQ29y ZS9yZW5kZXJpbmcvSW5saW5lQm94LmgJKHdvcmtpbmcgY29weSkKQEAgLTE4NSw3ICsxODUsNyBA QCBwdWJsaWM6CiAKICAgICBJbmxpbmVGbG93Qm94KiBwYXJlbnQoKSBjb25zdAogICAgIHsKLSAg ICAgICAgQVNTRVJUKCFtX2hhc0JhZFBhcmVudCk7CisgICAgICAgIEFTU0VSVF9XSVRIX1NFQ1VS SVRZX0lNUExJQ0FUSU9OKCFtX2hhc0JhZFBhcmVudCk7CiAgICAgICAgIHJldHVybiBtX3BhcmVu dDsKICAgICB9CiAgICAgdm9pZCBzZXRQYXJlbnQoSW5saW5lRmxvd0JveCogcGFyKSB7IG1fcGFy ZW50ID0gcGFyOyB9Cg==