Bug 127285 - Improve security mitigation added in webkit r94001. We missed the case where attachLine was called when we already had an inline box wrapper.
Summary: Improve security mitigation added in webkit r94001. We missed the case where ...
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebCore Misc. (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords: BlinkMergeCandidate, InRadar
: 116911 (view as bug list)
Depends on:
Blocks:
 
Reported: 2014-01-20 04:45 PST by Peter Molnar
Modified: 2016-07-14 10:23 PDT (History)
8 users (show)

See Also:

Attachments
patch (3.06 KB, patch)
2014-01-20 04:49 PST, Peter Molnar 		no flags Details | Formatted Diff | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Peter Molnar 2014-01-20 04:45:49 PST 
Merged from blink: https://src.chromium.org/viewvc/blink?revision=150697&view=revision
Comment 1 Peter Molnar 2014-01-20 04:49:26 PST 
Created attachment 221647 [details]
patch
Comment 2 Brent Fulgham 2014-04-16 14:19:51 PDT 
Comment on attachment 221647 [details]
patch

r=me
Comment 3 WebKit Commit Bot 2014-04-16 14:51:24 PDT 
Comment on attachment 221647 [details]
patch

Clearing flags on attachment: 221647

Committed r167387: <http://trac.webkit.org/changeset/167387>
Comment 4 WebKit Commit Bot 2014-04-16 14:51:28 PDT 
All reviewed patches have been landed.  Closing bug.
Comment 5 David Kilzer (:ddkilzer) 2014-04-16 16:43:31 PDT 
<rdar://problem/16641230>
Comment 6 Brent Fulgham 2016-07-14 10:23:47 PDT 
*** Bug 116911 has been marked as a duplicate of this bug. ***