[SCM] WebKit Debian packaging branch, debian/unstable, updated. debian/1.1.15-1-40151-g37bb677

[darin]

The following commit has been merged in the debian/unstable branch:
commit bb3ba7680b9d8045cc1c53143ebe648783b44ead
Author: darin <darin at 268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Date:   Fri Dec 20 19:35:46 2002 +0000

            Reviewed by John.
    
    	- fixed 3131449 -- crash in DOMNamedNodesCollection::tryGet opening a new window from JavaScript
    
            * khtml/ecma/kjs_dom.cpp: (DOMNamedNodesCollection::tryGet):
    	Add range checking. If the index is out of range fall back to the parent tryGet,
    	which will eventually just return Undefined().
    
    
    git-svn-id: http://svn.webkit.org/repository/webkit/trunk@3149 268f45cc-cd09-0410-ab3c-d52691b4dbfc

diff --git a/WebCore/ChangeLog-2003-10-25 b/WebCore/ChangeLog-2003-10-25
index aea4c1c..b9c6a0c 100644
--- a/WebCore/ChangeLog-2003-10-25
+++ b/WebCore/ChangeLog-2003-10-25
@@ -1,5 +1,15 @@
 2002-12-20  Darin Adler  <darin at apple.com>
 
+        Reviewed by John.
+
+	- fixed 3131449 -- crash in DOMNamedNodesCollection::tryGet opening a new window from JavaScript
+
+        * khtml/ecma/kjs_dom.cpp: (DOMNamedNodesCollection::tryGet):
+	Add range checking. If the index is out of range fall back to the parent tryGet,
+	which will eventually just return Undefined().
+
+2002-12-20  Darin Adler  <darin at apple.com>
+
         Reviewed by Richard and John.
 
 	- fixed 3133207 -- crash in HTMLFrameElementImpl updateForNewURL at home.real.com
diff --git a/WebCore/ChangeLog-2005-08-23 b/WebCore/ChangeLog-2005-08-23
index aea4c1c..b9c6a0c 100644
--- a/WebCore/ChangeLog-2005-08-23
+++ b/WebCore/ChangeLog-2005-08-23
@@ -1,5 +1,15 @@
 2002-12-20  Darin Adler  <darin at apple.com>
 
+        Reviewed by John.
+
+	- fixed 3131449 -- crash in DOMNamedNodesCollection::tryGet opening a new window from JavaScript
+
+        * khtml/ecma/kjs_dom.cpp: (DOMNamedNodesCollection::tryGet):
+	Add range checking. If the index is out of range fall back to the parent tryGet,
+	which will eventually just return Undefined().
+
+2002-12-20  Darin Adler  <darin at apple.com>
+
         Reviewed by Richard and John.
 
 	- fixed 3133207 -- crash in HTMLFrameElementImpl updateForNewURL at home.real.com
diff --git a/WebCore/khtml/ecma/kjs_dom.cpp b/WebCore/khtml/ecma/kjs_dom.cpp
index 003d2a5..5b7fc3c 100644
--- a/WebCore/khtml/ecma/kjs_dom.cpp
+++ b/WebCore/khtml/ecma/kjs_dom.cpp
@@ -1511,7 +1511,7 @@ Value DOMNamedNodesCollection::tryGet(ExecState *exec, const Identifier &propert
   // index?
   bool ok;
   unsigned int u = propertyName.toULong(&ok);
-  if (ok) {
+  if (ok && u < m_nodes.count()) {
     DOM::Node node = m_nodes[u];
     return getDOMNode(exec,node);
   }

-- 
WebKit Debian packaging