angler-fishThe Vulnerability History Project

Oilpan: move mutation observers to the Oilpan heap.

      R=haraken@chromium.org,erik.corry@gmail.com
BUG=340522

Review URL: https://codereview.chromium.org/236653002

git-svn-id: svn://svn.chromium.org/blink/trunk@172148 bbb929c8-8fbe-4397-9dbb-9b2b20218538
by Scott the Lizard 2014-04-22 16:09:26 UTC
commit e15b315960c47d964f9537abbdd2d0f45fe095dd
Chromium VCC CVE-2015-6789
third_party/WebKit/Source/bindings/v8/V8MutationCallback.cpp
+1 -1
third_party/WebKit/Source/bindings/v8/V8MutationCallback.h
+1 -1
third_party/WebKit/Source/bindings/v8/custom/V8MutationObserverCustom.cpp
+1 -1
third_party/WebKit/Source/core/css/PropertySetCSSStyleDeclaration.cpp
+2 -3
third_party/WebKit/Source/core/dom/CharacterData.cpp
+1 -1
third_party/WebKit/Source/core/dom/ChildListMutationScope.cpp
+2 -3
third_party/WebKit/Source/core/dom/ChildListMutationScope.h
+4 -6
third_party/WebKit/Source/core/dom/Element.cpp
+1 -1
third_party/WebKit/Source/core/dom/ElementRareData.h
+1 -4
third_party/WebKit/Source/core/dom/MutationCallback.h
+1 -2
third_party/WebKit/Source/core/dom/MutationObserver.cpp
+16 -33
third_party/WebKit/Source/core/dom/MutationObserver.h
+6 -9
third_party/WebKit/Source/core/dom/MutationObserver.idl
+1 -2
third_party/WebKit/Source/core/dom/MutationObserverInterestGroup.cpp
+9 -14
third_party/WebKit/Source/core/dom/MutationObserverInterestGroup.h
+8 -11
third_party/WebKit/Source/core/dom/MutationObserverRegistration.cpp
+2 -14
third_party/WebKit/Source/core/dom/MutationObserverRegistration.h
+3 -8
third_party/WebKit/Source/core/dom/MutationRecord.cpp
+10 -16
third_party/WebKit/Source/core/dom/MutationRecord.h
+5 -9
third_party/WebKit/Source/core/dom/MutationRecord.idl
-1
third_party/WebKit/Source/core/dom/Node.cpp
+18 -26
third_party/WebKit/Source/core/dom/Node.h
+3 -4
third_party/WebKit/Source/core/dom/NodeRareData.cpp
+1 -12
third_party/WebKit/Source/core/dom/NodeRareData.h
+7 -23
expand_less