Bug 116495
| Summary: | Fix null-pointer deref in DocumentLoader::responseReceived() | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Ryosuke Niwa <rniwa> |
| Component: | Page Loading | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED FIXED | ||
| Severity: | Normal | CC: | ap, beidson |
| Priority: | P1 | Keywords: | BlinkMergeCandidate, InRadar |
| Version: | 528+ (Nightly build) | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
Ryosuke Niwa
Consider merging https://chromium.googlesource.com/chromium/blink/+/eb8a1c93a99909c361016e1a8f7bf8734f04120a
When a load is cancelled via x-frame-options, we dispatch a load event. The
load event might detach the frame, in which case we shouldn't try to access
the frameLoader().
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Alexey Proskuryakov
<rdar://problem/13977070>
Alexey Proskuryakov
Committed <http://trac.webkit.org/r151812>.