summaryrefslogtreecommitdiffstats
path: root/main/webkit/cve-2010-3115.patch
diff options
context:
space:
mode:
Diffstat (limited to 'main/webkit/cve-2010-3115.patch')
-rw-r--r--main/webkit/cve-2010-3115.patch16
1 files changed, 16 insertions, 0 deletions
diff --git a/main/webkit/cve-2010-3115.patch b/main/webkit/cve-2010-3115.patch
new file mode 100644
index 000000000..84661767f
--- /dev/null
+++ b/main/webkit/cve-2010-3115.patch
@@ -0,0 +1,16 @@
+description: fix cve-2010-3115
+author: Michael Gilbert <michael.s.gilbert@gmail.com>
+origin: http://trac.webkit.org/changeset/63925
+Index: webkit-1.2.4/WebCore/page/History.cpp
+===================================================================
+--- webkit-1.2.4.orig/WebCore/page/History.cpp 2010-09-03 16:12:23.000000000 -0400
++++ webkit-1.2.4/WebCore/page/History.cpp 2010-09-06 22:08:52.000000000 -0400
+@@ -82,7 +82,7 @@
+
+ KURL History::urlForState(const String& urlString)
+ {
+- KURL baseURL = m_frame->loader()->baseURL();
++ KURL baseURL = m_frame->document()->url();
+ if (urlString.isEmpty())
+ return baseURL;
+