Bug 45835 - Fix incorrect usage of dissolveDragImageToFraction
Summary: Fix incorrect usage of dissolveDragImageToFraction
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: Platform (show other bugs)
Version: 528+ (Nightly build)
Hardware: PC OS X 10.5
: P2 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-09-15 14:03 PDT by Daniel Cheng
Modified: 2010-09-16 11:07 PDT (History)
1 user (show)

See Also:


Attachments
Patch (1.64 KB, patch)
2010-09-15 14:09 PDT, Daniel Cheng
no flags Details | Formatted Diff | Diff
Patch (2.29 KB, patch)
2010-09-15 14:34 PDT, Daniel Cheng
no flags Details | Formatted Diff | Diff
Patch (2.43 KB, patch)
2010-09-15 15:18 PDT, Daniel Cheng
no flags Details | Formatted Diff | Diff
Patch for landing (2.64 KB, patch)
2010-09-15 15:47 PDT, Daniel Cheng
no flags Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Daniel Cheng 2010-09-15 14:03:40 PDT
createDragImageForSelection() was ignoring the return value of dissolveDragImageToFraction(). This didn't happen to crash on most platforms, since most implementations simply modified the image that was passed in. However, Chromium Mac's implementation actually creates a new image and returns that instead. This caused us to crash when copying the image from the renderer to the browser process, since the memory had already been freed.
Comment 1 Daniel Cheng 2010-09-15 14:09:17 PDT
Created attachment 67711 [details]
Patch
Comment 2 Tony Chang 2010-09-15 14:14:32 PDT
Comment on attachment 67711 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=67711&action=prettypatch

Can you add a manual test in WebCore/manual-tests/chromium for this?
Comment 3 Daniel Cheng 2010-09-15 14:34:16 PDT
Created attachment 67717 [details]
Patch
Comment 4 Daniel Cheng 2010-09-15 15:18:30 PDT
Created attachment 67728 [details]
Patch
Comment 5 Tony Chang 2010-09-15 15:39:35 PDT
Comment on attachment 67728 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=67728&action=prettypatch

> WebCore/ChangeLog:16
> +        * manual-tests/selection-drag-crash.html: Added.
Please add a comment saying why this doesn't repro in DRT or test_shell.

> WebCore/manual-tests/selection-drag-crash.html:6
> +function selectText() {
> +    window.getSelection().selectAllChildren(document.body);
> +};
Nit: The semi-colon at the end of the test is not needed.
Comment 6 Daniel Cheng 2010-09-15 15:47:47 PDT
Created attachment 67735 [details]
Patch for landing
Comment 7 WebKit Commit Bot 2010-09-15 16:03:55 PDT
Comment on attachment 67735 [details]
Patch for landing

Rejecting patch 67735 from commit-queue.

dcheng@chromium.org does not have committer permissions according to http://trac.webkit.org/browser/trunk/WebKitTools/Scripts/webkitpy/common/config/committers.py.

- If you do not have committer rights please read http://webkit.org/coding/contributing.html for instructions on how to use bugzilla flags.

- If you have committer rights please correct the error in WebKitTools/Scripts/webkitpy/common/config/committers.py by adding yourself to the file (no review needed).  The commit-queue restarts itself every 2 hours.  After restart the commit-queue will correctly respect your committer rights.
Comment 8 Tony Chang 2010-09-15 16:06:23 PDT
Comment on attachment 67735 [details]
Patch for landing

thought that might happen.  let's try that again.
Comment 9 WebKit Commit Bot 2010-09-16 07:48:18 PDT
Comment on attachment 67735 [details]
Patch for landing

Rejecting patch 67735 from commit-queue.

Unexpected failure when processing patch!  Please file a bug against webkit-patch.
Failed to run "['WebKitTools/Scripts/webkit-patch', '--status-host=queues.webkit.org', 'land-attachment', '--force-clean', '--non-interactive', '--ignore-builders', '--quiet', '--parent-command=commit-queue', 67735]" exit_code: 1
Last 500 characters of output:
.cgi?id=67735&action=edit
Fetching: https://bugs.webkit.org/show_bug.cgi?id=45835&ctype=xml
Processing 1 patch from 1 bug.
Cleaning working directory
Updating working directory
Processing patch 67735 from bug 45835.
NOBODY (OOPS!) found in /Projects/CommitQueue/WebCore/ChangeLog does not appear to be a valid reviewer according to committers.py.
ERROR: /Projects/CommitQueue/WebCore/ChangeLog neither lists a valid reviewer nor contains the string "Unreviewed" or "Rubber stamp" (case insensitive).
Comment 10 WebKit Commit Bot 2010-09-16 11:06:58 PDT
Comment on attachment 67735 [details]
Patch for landing

Clearing flags on attachment: 67735

Committed r67641: <http://trac.webkit.org/changeset/67641>
Comment 11 WebKit Commit Bot 2010-09-16 11:07:03 PDT
All reviewed patches have been landed.  Closing bug.