Bug 33499

Summary: [Chromium] Need to clear accepted index on abandon if user accepts the selected index
Product: WebKit Reporter: Victor Wang <victorw>
Component: Layout and RenderingAssignee: Nobody <webkit-unassigned>
Severity: Normal CC: commit-queue, dglazkov
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: PC   
OS: All   
Description Flags
proposed patch none

Description Victor Wang 2010-01-11 16:10:24 PST
This is for chromium only. Regression from http://trac.webkit.org/changeset/52001

If user accepts an item from dropdown list, m_acceptedIndexOnAbandon is not cleared and the dropdown will crash if it is destroyed. This is 
To repro:
1) http://code.google.com/p/chromium/issues/entry
2) Select the "template" drop-down
3) Hit B, Hit <enter>
4) Boom
Comment 1 Victor Wang 2010-01-11 16:23:57 PST
Created attachment 46318 [details]
proposed patch
Comment 2 Dimitri Glazkov (Google) 2010-01-11 16:32:10 PST
Comment on attachment 46318 [details]
proposed patch

Comment 3 Dimitri Glazkov (Google) 2010-01-11 16:47:01 PST
Comment on attachment 46318 [details]
proposed patch

cq, take it away.
Comment 4 WebKit Commit Bot 2010-01-11 17:22:54 PST
Comment on attachment 46318 [details]
proposed patch

Clearing flags on attachment: 46318

Committed r53113: <http://trac.webkit.org/changeset/53113>
Comment 5 WebKit Commit Bot 2010-01-11 17:22:59 PST
All reviewed patches have been landed.  Closing bug.