summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSteve Block <steveblock@google.com>2010-09-10 04:32:10 -0700
committerAndroid Git Automerger <android-git-automerger@android.com>2010-09-10 04:32:10 -0700
commit9836c30e301e8c144507e06ef2482d33c89a7d1c (patch)
tree3bc09ce26af045919965717db7a7c598c3b5a4ce
parentcd011297fda5b6f6093453d59c2624aaf878e2fb (diff)
parenta926fcfd627808c13994eb22aa991c82fd57673a (diff)
downloadexternal_webkit-9836c30e301e8c144507e06ef2482d33c89a7d1c.zip
external_webkit-9836c30e301e8c144507e06ef2482d33c89a7d1c.tar.gz
external_webkit-9836c30e301e8c144507e06ef2482d33c89a7d1c.tar.bz2
am a926fcfd: Cherry-pick security fix in WebKit change 61709
Merge commit 'a926fcfd627808c13994eb22aa991c82fd57673a' into gingerbread-plus-aosp * commit 'a926fcfd627808c13994eb22aa991c82fd57673a': Cherry-pick security fix in WebKit change 61709
-rw-r--r--WebCore/dom/SelectElement.cpp9
1 files changed, 7 insertions, 2 deletions
diff --git a/WebCore/dom/SelectElement.cpp b/WebCore/dom/SelectElement.cpp
index 866b6ca..0338c1e 100644
--- a/WebCore/dom/SelectElement.cpp
+++ b/WebCore/dom/SelectElement.cpp
@@ -342,8 +342,13 @@ void SelectElement::setSelectedIndex(SelectElementData& data, Element* element,
data.setUserDrivenChange(userDrivenChange);
if (fireOnChangeNow)
menuListOnChange(data, element);
- if (RenderMenuList* menuList = toRenderMenuList(element->renderer()))
- menuList->didSetSelectedIndex();
+ RenderObject* renderer = element->renderer();
+ if (renderer) {
+ if (data.usesMenuList())
+ toRenderMenuList(renderer)->didSetSelectedIndex();
+ else if (renderer->isListBox())
+ toRenderListBox(renderer)->selectionChanged();
+ }
}
if (Frame* frame = element->document()->frame())