Backport crash fix by Huzaifa Sidhpurwala <huzaifas@redhat.com>
authorHuzaifa Sidhpurwala <huzaifas@redhat.com>
Fri, 31 Dec 2010 10:22:12 +0000 (15:52 +0530)
committerHuzaifa Sidhpurwala <huzaifas@redhat.com>
Fri, 31 Dec 2010 10:22:12 +0000 (15:52 +0530)
commitd842bb085aceec4fcfc392a7b76c92c258cd5151
tree8ed4336f4d2529642c3c9b604f80ca0eccdf7378
parentfa67735c95ca9b356f665ab942f32671cd8db07d
Backport crash fix by Huzaifa Sidhpurwala <huzaifas@redhat.com>

    2010-11-09  Abhishek Arya  <inferno@chromium.org>

            Reviewed by Antti Koivisto.

            Call to SVGSMILElement::applyResultsToTarget can blow away the SVGSMILElement.
            Refptr the SVGSMILElement in the ResultElementMap to protect it.
            https://bugs.webkit.org/show_bug.cgi?id=49274

            Test: svg/animations/animate-update-crash.xhtml

            * svg/animation/SMILTimeContainer.cpp:
            (WebCore::SMILTimeContainer::updateAnimations):
    2010-11-09  Abhishek Arya  <inferno@chromium.org>

            Reviewed by Antti Koivisto.

            Tests that updating svg animations does not result in crash.
            https://bugs.webkit.org/show_bug.cgi?id=49274

            * svg/animations/animate-update-crash-expected.txt: Added.
            * svg/animations/animate-update-crash.xhtml: Added.

    git-svn-id: http://svn.webkit.org/repository/webkit/trunk@71686 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/svg/animations/animate-update-crash-expected.txt [new file with mode: 0644]
LayoutTests/svg/animations/animate-update-crash.xhtml [new file with mode: 0644]
WebCore/svg/animation/SMILTimeContainer.cpp