angler-fishThe Vulnerability History Project

Revert &quotUnify ways to cache named item in HTMLCollections&quot

      This reverts commit 5705911a4713a1370967ffe9630cb1a9ed6fd2b0.

It makes fast/events/window-onerror-02.html crash.
BUG=265009
TBR=abarth

Review URL: https://codereview.chromium.org/21679004

git-svn-id: svn://svn.chromium.org/blink/trunk@155503 bbb929c8-8fbe-4397-9dbb-9b2b20218538
by Lulu the Dalmatian 2013-08-05 04:04:38 UTC
commit 4c86be9cd7d7f12109227febd895d72357a4554d
Chromium VCC CVE-2013-6624
third_party/WebKit/LayoutTests/fast/dom/htmlallcollection-detached-node-children-expected.txt
+13
third_party/WebKit/LayoutTests/fast/dom/htmlallcollection-detached-node-children.html
+27
third_party/WebKit/LayoutTests/fast/dom/window-polluter-tricky-expected.txt
+8
third_party/WebKit/LayoutTests/fast/dom/window-polluter-tricky.html
+11
third_party/WebKit/Source/bindings/v8/V8WindowShell.cpp
+19 -10
third_party/WebKit/Source/bindings/v8/custom/V8WindowCustom.cpp
+22 -22
third_party/WebKit/Source/core/dom/Document.cpp
+2 -2
third_party/WebKit/Source/core/dom/DocumentOrderedMap.cpp
+31
third_party/WebKit/Source/core/dom/DocumentOrderedMap.h
+6 -3
third_party/WebKit/Source/core/dom/Element.cpp
+58 -32
third_party/WebKit/Source/core/dom/Element.h
+1 -6
third_party/WebKit/Source/core/dom/TreeScope.cpp
+24 -1
third_party/WebKit/Source/core/dom/TreeScope.h
+24 -5
third_party/WebKit/Source/core/html/HTMLAppletElement.h
-3
third_party/WebKit/Source/core/html/HTMLCollection.cpp
+38 -48
third_party/WebKit/Source/core/html/HTMLCollection.h
-1
third_party/WebKit/Source/core/html/HTMLDocument.cpp
+14 -38
third_party/WebKit/Source/core/html/HTMLDocument.h
+6 -22
third_party/WebKit/Source/core/html/HTMLEmbedElement.h
-2
third_party/WebKit/Source/core/html/HTMLFormElement.h
-2
third_party/WebKit/Source/core/html/HTMLIFrameElement.cpp
+1 -23
third_party/WebKit/Source/core/html/HTMLIFrameElement.h
-4
third_party/WebKit/Source/core/html/HTMLImageElement.cpp
+16 -1
third_party/WebKit/Source/core/html/HTMLImageElement.h
-2
third_party/WebKit/Source/core/html/HTMLNameCollection.cpp
+38 -49
third_party/WebKit/Source/core/html/HTMLNameCollection.h
+41 -6
third_party/WebKit/Source/core/html/HTMLObjectElement.cpp
+16 -7
third_party/WebKit/Source/core/html/HTMLObjectElement.h
+6 -3
expand_less