commit 7ab42b1fb12539d9753f6e21889e2396b3bdff51
author commit-queue@webkit.org <commit-queue@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc> Thu Sep 22 00:17:45 2011 +0000
committer commit-queue@webkit.org <commit-queue@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc> Thu Sep 22 00:17:45 2011 +0000
tree 355cedd0f346d0d17f5d6e0339dc01c45fc6a7a6
parent 3664026ff6cd04059923f7c65b55e4f8f5e83007

[Chromium] Protect message ports from being deleted in V8MessageEvent::portsAccessorGetter
https://bugs.webkit.org/show_bug.cgi?id=68584

Patch by Sergey Glazunov <serg.glazunov@gmail.com> on 2011-09-21
Reviewed by Adam Barth.

Source/WebCore:

Test: fast/dom/message-port-deleted-by-accessor.html

* bindings/v8/custom/V8MessageEventCustom.cpp:
(WebCore::V8MessageEvent::portsAccessorGetter):

LayoutTests:

* fast/dom/message-port-deleted-by-accessor-expected.txt: Added.
* fast/dom/message-port-deleted-by-accessor.html: Added.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@95689 268f45cc-cd09-0410-ab3c-d52691b4dbfc

LayoutTests/fast/dom/message-port-deleted-by-accessor-expected.txt

diff --git a/LayoutTests/fast/dom/message-port-deleted-by-accessor-expected.txt b/LayoutTests/fast/dom/message-port-deleted-by-accessor-expected.txt
new file mode 100644
index 0000000..730ebf6
--- /dev/null
+++ b/LayoutTests/fast/dom/message-port-deleted-by-accessor-expected.txt
@@ -0,0 +1 @@
+This test passes if it doesn't crash.