Bug 112613

Summary: [v8] Suppress binding integrity check of HTMLContentElement.
Product: WebKit Reporter: Thomas Sepez <tsepez>
Component: WebCore Misc.Assignee: Thomas Sepez <tsepez>
Status: RESOLVED FIXED    
Severity: Normal CC: abarth, esprehn+autocc, ojan.autocc, webkit.review.bot
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Bug Depends on:    
Bug Blocks: 112191    
Attachments:
Description Flags
Patch. none

Thomas Sepez
Reported 2013-03-18 13:27:46 PDT
There is an attempt to wrap a WebCore::DetailsSummaryElement as its parent class, HTMLContentElement. Likely to cause a crash in fast/dom/shadow/content-element-user-agent-shadow.html
Attachments
Patch. (1.21 KB, patch)
2013-03-18 14:55 PDT, Thomas Sepez 		no flags
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Thomas Sepez
Comment 1 2013-03-18 13:56:36 PDT
Invalid issue. CustomElementRegistry should take care of this.
Thomas Sepez
Comment 2 2013-03-18 14:45:32 PDT
Not quite. Currently, this is going through HTMLUnknownElement, because its tag name isn't recognized. But under the changes proposed in https://bugs.webkit.org/show_bug.cgi?id=112191, this will get a HTMLCustomElement wrapper necessitating the change.
Thomas Sepez
Comment 3 2013-03-18 14:55:13 PDT
Created attachment 193662 [details] Patch.
WebKit Review Bot
Comment 4 2013-03-18 16:19:52 PDT
Comment on attachment 193662 [details] Patch. Clearing flags on attachment: 193662 Committed r146147: <http://trac.webkit.org/changeset/146147>
WebKit Review Bot
Comment 5 2013-03-18 16:19:56 PDT
All reviewed patches have been landed. Closing bug.
Note You need to log in before you can comment on or make changes to this bug.