summaryrefslogtreecommitdiffstats
path: root/webkit/data/plugins
diff options
context:
space:
mode:
authorjam@chromium.org <jam@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2009-04-16 18:19:44 +0000
committerjam@chromium.org <jam@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2009-04-16 18:19:44 +0000
commitf2eefdabd9adf6c31676a401b4fc01e4e9218cbe (patch)
tree108efd9f9abbd08201b4623e6f509ea445cf8ccf /webkit/data/plugins
parent2b2d1697cd3cd6303b372949565bb8ac87741589 (diff)
downloadchromium_src-f2eefdabd9adf6c31676a401b4fc01e4e9218cbe.zip
chromium_src-f2eefdabd9adf6c31676a401b4fc01e4e9218cbe.tar.gz
chromium_src-f2eefdabd9adf6c31676a401b4fc01e4e9218cbe.tar.bz2
Ensure we check the page pointer before using it after we come out of NPP_HandleEvent, as it might have gone away depending on JavaScript that was executed by the plugin.
BUG=9955 Review URL: http://codereview.chromium.org/75026 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@13858 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'webkit/data/plugins')
-rw-r--r--webkit/data/plugins/delete_frame.html5
-rw-r--r--webkit/data/plugins/delete_frame_iframe.html5
2 files changed, 10 insertions, 0 deletions
diff --git a/webkit/data/plugins/delete_frame.html b/webkit/data/plugins/delete_frame.html
new file mode 100644
index 0000000..7ad2caa
--- /dev/null
+++ b/webkit/data/plugins/delete_frame.html
@@ -0,0 +1,5 @@
+<html>
+<body>
+<iframe id='frame' src='delete_frame_iframe.html'></iframe>
+</body>
+</html>
diff --git a/webkit/data/plugins/delete_frame_iframe.html b/webkit/data/plugins/delete_frame_iframe.html
new file mode 100644
index 0000000..bd9b655
--- /dev/null
+++ b/webkit/data/plugins/delete_frame_iframe.html
@@ -0,0 +1,5 @@
+<html>
+<body>
+<embed id='1' type='application/vnd.npapi-test' src='foo' name='delete_frame_test'>
+</body>
+</html> \ No newline at end of file