Use after free in WebCore::DisplayRefreshMonitorClient::fireDisplayRefreshIfNeeded
http://webkit.org/b/121033
Reviewed by Darin Adler.
Source/WebCore:
Add an ASSERT to detect if an animation client will be removed
during the callback dispatch.
Test: fast/animation/request-animation-frame-remove-client.html
* platform/graphics/DisplayRefreshMonitor.cpp:
(WebCore::DisplayRefreshMonitor::displayDidRefresh):
LayoutTests:
Test that assertion fires if you try to remove potential client while in a
animation dispatch.
* TestExpectations: Mark test as crashing.
* fast/animation/request-animation-frame-remove-client-expected.txt: Added.
* fast/animation/request-animation-frame-remove-client.html: Added.
git-svn-id: http://svn.webkit.org/repository/webkit/trunk@157298 268f45cc-cd09-0410-ab3c-d52691b4dbfc
6 files changed
