Bug 67361

Summary: [chromium/835]: Crash when inserting text with a trailing newline into a textarea via JS
Product: WebKit Reporter: Ryosuke Niwa <rniwa>
Component: FormsAssignee: Ryosuke Niwa <rniwa>
Status: RESOLVED WONTFIX    
Severity: Normal CC: dglazkov, fishd, tkent
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Bug Depends on: 66241    
Bug Blocks:    
Attachments:
Description Flags
fixes the bug on 835 branch
none
fixed a bug in setInnerTextValue tkent: review+, tkent: commit-queue-

Description Ryosuke Niwa 2011-08-31 22:59:14 PDT
We need to create a fix for the bug 66241 for chromium branch 835.
Comment 1 Ryosuke Niwa 2011-08-31 23:20:14 PDT
Created attachment 105899 [details]
fixes the bug on 835 branch
Comment 2 Ryosuke Niwa 2011-08-31 23:22:49 PDT
Created attachment 105900 [details]
fixed a bug in setInnerTextValue
Comment 3 Kent Tamura 2011-09-01 00:35:18 PDT
Comment on attachment 105900 [details]
fixed a bug in setInnerTextValue

r+, but let's wait for a merge approval.
Comment 4 Ryosuke Niwa 2011-09-06 12:13:01 PDT
This change turned out to be too risky, not fixing in the branch.