DescriptionUptake WebKit Changeset r149185.
Object elements have the tendency to modify or even fully remove
the containing Document inside beforeload callback. While Document is removed,
RenderArena gets destroyed. Retained RenderWidgets fails to function with NULL arena.
Protect RendereArena from getting wiped out, when Document is removed
during FrameView::updateWidget().
BUG=226696
Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=152086
Patch Set 1 #Patch Set 2 : Add missing tests #Patch Set 3 : Fix tests location #Patch Set 4 : Refetch render view and null check AXObjectCache #
Messages
Total messages: 13 (0 generated)
|