2006-03-20 Eric Seidel <eseidel@apple.com>

        Reviewed by mjs.

        Fix tokenizer crash when document.open() is called from an external script:
        <rdar://problem/4483882> REGRESSION (417.8-TOT): crash at yourmovies.com.au in WebCore::HTMLTokenizer::reset() + 92 (7818)

        * dom/Document.cpp:
        (WebCore::Document::open): Check to make sure the current tokenizer isn't executing a script
        * dom/xml_tokenizer.h:
        (WebCore::Tokenizer::executingScript): Add a way for others to know if scripts are executing.
        * html/HTMLTokenizer.cpp:
        (WebCore::HTMLTokenizer::scriptExecution): Wire into existing m_executingScript member var.
        * html/HTMLTokenizer.h:
        (WebCore::HTMLTokenizer::executingScript):
        * kcanvas/device/quartz/KCanvasFilterQuartz.mm:
        (WebCore::KCanvasFilterQuartz::prepareFilter): Unrelated code cleanup.


git-svn-id: svn://svn.chromium.org/blink/trunk@13413 bbb929c8-8fbe-4397-9dbb-9b2b20218538

1 files changed, 4 insertions, 0 deletions

diff --git a/third_party/WebKit/LayoutTests/fast/tokenizer/resources/external-script-document-open.js b/third_party/WebKit/LayoutTests/fast/tokenizer/resources/external-script-document-open.js
new file mode 100644
index 0000000..418aa94
--- /dev/null
+++ b/third_party/WebKit/LayoutTests/fast/tokenizer/resources/external-script-document-open.js
@@ -0,0 +1,4 @@
+if (window.layoutTestController)
+    layoutTestController.dumpAsText();
+document.open()
+document.write("SUCCESS (2 of 2)");