freebsd-ports/www/firefox36/files/patch-ff-453736
Martin Wilke 5657fe7eac Backport patches to fix the following security vulnerabilities:
CVE-2009-1312
	CVE-2009-0652
	CVE-2009-1302
	CVE-2009-1303

Obtained from:	Mozilla Bugzilla
Security:	http://www.vuxml.org/freebsd/3b18e237-2f15-11de-9672-0030843d3802.html
2009-04-22 08:49:19 +00:00

46 lines
1.3 KiB
Text

diff -p -U 8 -r1.15 nsSVGScriptElement.cpp
--- content/svg/content/src/nsSVGScriptElement.cpp 28 Apr 2005 23:47:55 -0000 1.15
+++ content/svg/content/src/nsSVGScriptElement.cpp 26 Feb 2009 21:03:08 -0000
@@ -177,17 +177,40 @@ nsSVGScriptElement::Init()
}
return NS_OK;
}
//----------------------------------------------------------------------
// nsIDOMNode methods
-NS_IMPL_DOM_CLONENODE_WITH_INIT(nsSVGScriptElement)
+nsresult
+nsSVGScriptElement::CloneNode(PRBool aDeep, nsIDOMNode** aReturn)
+{
+ *aReturn = nsnull;
+
+ nsSVGScriptElement* it = new nsSVGScriptElement(mNodeInfo);
+ if (!it) {
+ return NS_ERROR_OUT_OF_MEMORY;
+ }
+
+ nsCOMPtr<nsIDOMNode> kungFuDeathGrip(it);
+
+ CopyInnerTo(it, aDeep);
+
+ // The clone should be marked evaluated if we are. It should also be marked
+ // evaluated if we're evaluating, to handle the case when this script node's
+ // script clones the node.
+ it->mIsEvaluated = mIsEvaluated || mEvaluating;
+ it->mLineNumber = mLineNumber;
+
+ kungFuDeathGrip.swap(*aReturn);
+
+ return NS_OK;
+}
//----------------------------------------------------------------------
// nsIDOMSVGScriptElement methods
/* attribute DOMString type; */
NS_IMETHODIMP
nsSVGScriptElement::GetType(nsAString & aType)
{