commit cdec56d30b328b6b2785707f026a5b6ac3b244ab
author ap@webkit.org <ap@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc> Thu Sep 25 11:30:02 2008 +0000
committer ap@webkit.org <ap@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc> Thu Sep 25 11:30:02 2008 +0000
tree fc9f14f148363c86454dd11dcce7dece0cd13a49
parent 28b5175c7583147872e8d7d44fed59ea6d7576ef

        Reviewed by Eric Seidel.

        https://bugs.webkit.org/show_bug.cgi?id=21097
        Calling a MessageChannel constructor from a destroyed document results in a crash

        Test: fast/events/message-port-constructor-for-deleted-document.html

        * bindings/js/JSMessageChannelConstructor.cpp:
        (WebCore::JSMessageChannelConstructor::construct):
        * bindings/js/JSMessageChannelConstructor.h:
        Made m_document a RefPtr.



git-svn-id: http://svn.webkit.org/repository/webkit/trunk@36892 268f45cc-cd09-0410-ab3c-d52691b4dbfc

WebCore/ChangeLog

diff --git a/WebCore/ChangeLog b/WebCore/ChangeLog
index 3655fc5..c53469e 100644
--- a/WebCore/ChangeLog
+++ b/WebCore/ChangeLog
@@ -1,3 +1,17 @@
+2008-09-25  Alexey Proskuryakov  <ap@webkit.org>
+
+        Reviewed by Eric Seidel.
+
+        https://bugs.webkit.org/show_bug.cgi?id=21097
+        Calling a MessageChannel constructor from a destroyed document results in a crash
+
+        Test: fast/events/message-port-constructor-for-deleted-document.html
+
+        * bindings/js/JSMessageChannelConstructor.cpp:
+        (WebCore::JSMessageChannelConstructor::construct):
+        * bindings/js/JSMessageChannelConstructor.h:
+        Made m_document a RefPtr.
+
 2008-09-24  Alexey Proskuryakov  <ap@webkit.org>
 
         Reviewed by Sam Weinig, Anders Carlsson, and (unofficially) Adam Barth.