From: ChangSeok Oh <changseok@webkit.org>
Date: Thu, 16 Apr 2020 16:37:24 +0000 (+0100)
Subject: Fix CVE-2020-11793
X-Git-Tag: archive/raspbian/2.26.4-1_deb10u3+rpi1^2~1
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=49077e2b9847c8758bd5db050d0561da4f85bacc;p=webkit2gtk.git

Fix CVE-2020-11793

Origin: https://trac.webkit.org/changeset/258532/webkit

===================================================================

Gbp-Pq: Name cve-2020-11793-fix.patch
---

diff --git a/Source/WebCore/html/HTMLTextAreaElement.cpp b/Source/WebCore/html/HTMLTextAreaElement.cpp
index 3741856367..681ca78001 100644
--- a/Source/WebCore/html/HTMLTextAreaElement.cpp
+++ b/Source/WebCore/html/HTMLTextAreaElement.cpp
@@ -284,13 +284,14 @@ void HTMLTextAreaElement::defaultEventHandler(Event& event)
 
 void HTMLTextAreaElement::subtreeHasChanged()
 {
-    setChangedSinceLastFormControlChangeEvent(true);
     setFormControlValueMatchesRenderer(false);
     updateValidity();
 
     if (!focused())
         return;
 
+    setChangedSinceLastFormControlChangeEvent(true);
+
     if (RefPtr<Frame> frame = document().frame())
         frame->editor().textDidChangeInTextArea(this);
     // When typing in a textarea, childrenChanged is not called, so we need to force the directionality check.