external_webkit.git - external/webkit

	Commit message (Collapse)	Author	Age	Files	Lines
*	Crash on Orange media portal	Anders Edenbrandt	2012-08-31	1	-0/+6
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Visit orange.deezer.com, press tab marked "My Music". Browser crashes every time. Pressing the button will trigger a re-layout of the page. This in turn will cause some rendering nodes of type RenderLayer to be removed from the rendering tree. When such a node is removed, it is important to also update certain lists in ancestor nodes that may hold references to this node. A node that may hold such a reference is identified as being a "stacking context". However, in Android, when the symbol ENABLE_COMPOSITED_FIXED_ELEMENTS is defined, the definition of what is a stacking context is expanded. In this case, a node that is a stacking context and holds references to descendants, changes one of the conditions that form part of Android's expanded stacking context definition. So, now it is no longer a stacking context, but the reference list is not deleted/updated. When the descendant node is removed a search for an ancestral stacking context is made, but it will not find this node since it is no longer a stacking context. The solution is to make sure that the list of references is updated/cleared whenever the node changes a condition that may cause its status as a stacking context to also change. Change-Id: If5a7b63715020bc3d23749a7c09003a86d90e28d
*	Cherrypick WebKit r94543.	Victoria Lease	2012-05-18	1	-0/+17
\| \| \| \| \| \| \| \| \| \| \| \|	http://trac.webkit.org/changeset/94543 isBeforeOrAfterContent() was already pulled in from r94543 as a part of I02da7a9f891a6eec394398529f64b0992cbfce70, but we needed the rest of the patch to address our ruby text alignment issues. Bug: 6105670 Change-Id: Iad4d6308ab053488abd118eee83058cfc81e22e8
*	Cherry-pick WebKit change r99731 to fix a LayoutTest crash	Steve Block	2012-04-12	1	-0/+4
\| \| \| \| \| \| \| \| \|	svg/foreignObject/absolute-position-foreign-object-child-crash.html See http://trac.webkit.org/changeset/99731 Bug: 6329122 Change-Id: Ibee43b565d69507c4abace7e1ab298c660de137f
*	Cherry pick 97075	John Reck	2011-10-20	1	-2/+2
\| \| \| \| \| \|	Bug: 5491444 Change-Id: If97d58a3d590e8e972bceec61e3ae16860a30088
*	Merge WebKit at r84325: Initial merge by git.	Ben Murdoch	2011-06-10	1	-239/+110
\| \| \| \|	Change-Id: Ic1a909300ecc0a13ddc6b4e784371d2ac6e3d59b
*	Merge WebKit at r82507: Initial merge by git	Steve Block	2011-06-08	1	-15/+25
\| \| \| \|	Change-Id: I60ce9d780725b58b45e54165733a8ffee23b683e
*	Merge WebKit at r80534: Intial merge by Git	Ben Murdoch	2011-06-02	1	-6/+7
\| \| \| \|	Change-Id: Ia7a83357124c9e1cdb1debf55d9661ec0bd09a61
*	Merge WebKit at r78450: Initial merge by git.	Steve Block	2011-05-24	1	-16/+41
\| \| \| \|	Change-Id: I6d3e5f1f868ec266a0aafdef66182ddc3f265dc1
*	Merge WebKit at r76408: Initial merge by git.	Ben Murdoch	2011-05-23	1	-29/+13
\| \| \| \|	Change-Id: I5b91decbd693ccbf5c1b8354b37cd68cc9a1ea53
*	Merge WebKit at r75993: Initial merge by git.	Ben Murdoch	2011-05-16	1	-1/+2
\| \| \| \|	Change-Id: I602bbdc3974787a3b0450456a30a7868286921c3
*	Merge WebKit at r75315: Initial merge by git.	Steve Block	2011-05-12	1	-0/+2776
	Change-Id: I570314b346ce101c935ed22a626b48c2af266b84