<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>124145</bug_id>
          
          <creation_ts>2013-11-11 06:31:29 -0800</creation_ts>
          <short_desc>REGRESSION (r158774): Iteration over element children is broken</short_desc>
          <delta_ts>2013-11-17 13:36:17 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>DOM</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar, Regression</keywords>
          <priority>P1</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter>yannick.poirier</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>ap</cc>
    
    <cc>commit-queue</cc>
    
    <cc>esprehn+autocc</cc>
    
    <cc>gyuyoung.kim</cc>
    
    <cc>kling</cc>
    
    <cc>koivisto</cc>
    
    <cc>rniwa</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>949274</commentid>
    <comment_count>0</comment_count>
    <who name="">yannick.poirier</who>
    <bug_when>2013-11-11 06:31:29 -0800</bug_when>
    <thetext>The following test fails with the error
line 14:41 : TypeError: null is not an object (evaluating &apos;frame.children[i].firstChild.innerHTML = &quot;test&quot;&apos;)
The DOM tree seems to be corrupted after an innerHTML.

&lt;html&gt;
&lt;head&gt;&lt;/head&gt;
&lt;body&gt;
    &lt;div id=&quot;frame&quot;&gt;
        &lt;div&gt;&lt;div&gt;&lt;/div&gt;&lt;/div&gt;
        &lt;div&gt;&lt;div&gt;&lt;/div&gt;&lt;/div&gt;
        &lt;div&gt;&lt;div&gt;&lt;/div&gt;&lt;/div&gt;
        &lt;div&gt;&lt;div&gt;&lt;/div&gt;&lt;/div&gt;
        &lt;div&gt;&lt;div&gt;&lt;/div&gt;&lt;/div&gt;
    &lt;/div&gt;
    &lt;script type=&quot;text/javascript&quot;&gt;
        frame = document.getElementById(&quot;frame&quot;);
        for (var i = 0; i &lt; frame.children.length; i++)
            frame.children[i].firstChild.innerHTML = &quot;test&quot;;
    &lt;/script&gt;
&lt;/body&gt;
&lt;/html&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>949338</commentid>
    <comment_count>1</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2013-11-11 09:35:43 -0800</bug_when>
    <thetext>&lt;rdar://problem/15437790&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>951433</commentid>
    <comment_count>2</comment_count>
      <attachid>217151</attachid>
    <who name="Antti Koivisto">koivisto</who>
    <bug_when>2013-11-17 12:51:16 -0800</bug_when>
    <thetext>Created attachment 217151
patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>951434</commentid>
    <comment_count>3</comment_count>
      <attachid>217151</attachid>
    <who name="Anders Carlsson">andersca</who>
    <bug_when>2013-11-17 12:53:30 -0800</bug_when>
    <thetext>Comment on attachment 217151
patch

View in context: https://bugs.webkit.org/attachment.cgi?id=217151&amp;action=review

&gt; Source/WebCore/ChangeLog:12
&gt; +        Reducation by yannick.poirier@inverto.tv.

Reduction?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>951435</commentid>
    <comment_count>4</comment_count>
    <who name="Antti Koivisto">koivisto</who>
    <bug_when>2013-11-17 13:35:26 -0800</bug_when>
    <thetext>https://trac.webkit.org/r159389</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>951436</commentid>
    <comment_count>5</comment_count>
    <who name="Antti Koivisto">koivisto</who>
    <bug_when>2013-11-17 13:36:17 -0800</bug_when>
    <thetext>Thanks for the bug report and good reduction Yannick!</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>217151</attachid>
            <date>2013-11-17 12:51:16 -0800</date>
            <delta_ts>2013-11-17 12:53:30 -0800</delta_ts>
            <desc>patch</desc>
            <filename>htmlcollection-children-only-backwards.patch</filename>
            <type>text/plain</type>
            <size>4575</size>
            <attacher name="Antti Koivisto">koivisto</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09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</data>
<flag name="review"
          id="240240"
          type_id="1"
          status="+"
          setter="andersca"
    />
          </attachment>
      

    </bug>

</bugzilla>