<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>144870</bug_id>
          
          <creation_ts>2015-05-11 07:01:37 -0700</creation_ts>
          <short_desc>WebContent crash under com.apple.WebCore: WebCore::WebKitCSSResourceValue::isCSSValueNone const + 6</short_desc>
          <delta_ts>2015-05-11 09:27:46 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Layout and Rendering</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Antti Koivisto">koivisto</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>commit-queue</cc>
    
    <cc>simon.fraser</cc>
    
    <cc>stavila</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1093746</commentid>
    <comment_count>0</comment_count>
    <who name="Antti Koivisto">koivisto</who>
    <bug_when>2015-05-11 07:01:37 -0700</bug_when>
    <thetext>Null pointer crash:

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebCore             	0x00007fff92da5706 WebCore::WebKitCSSResourceValue::isCSSValueNone() const + 6
1   com.apple.WebCore             	0x00007fff93382b48 WebCore::MaskImageOperation::isCSSValueNone() const + 24
2   com.apple.WebCore             	0x00007fff92e0475e WebCore::FillLayer::hasNonEmptyMaskImage() const + 30
3   com.apple.WebCore             	0x00007fff9290874c WebCore::StyleResolver::loadPendingSVGDocuments() + 76
4   com.apple.WebCore             	0x00007fff936815b8 WebCore::StyleResolver::applyMatchedProperties(WebCore::StyleResolver::MatchResult const&amp;, WebCore::Element const*, WebCore::StyleResolver::ShouldUseMatchedPropertiesCache) + 2328
5   com.apple.WebCore             	0x00007fff93680a2e WebCore::StyleResolver::styleForElement(WebCore::Element*, WebCore::RenderStyle*, WebCore::StyleSharingBehavior, WebCore::RuleMatchingBehavior, WebCore::RenderRegion const*) + 1678
6   com.apple.WebCore             	0x00007fff9368a390 WebCore::Style::attachRenderTree(WebCore::Element&amp;, WebCore::RenderStyle&amp;, WebCore::RenderTreePosition&amp;, WTF::PassRefPtr&lt;WebCore::RenderStyle&gt;) + 704
7   com.apple.WebCore             	0x00007fff9368a9d0 WebCore::Style::attachChildren(WebCore::ContainerNode&amp;, WebCore::RenderStyle&amp;, WebCore::RenderTreePosition&amp;) + 160
8   com.apple.WebCore             	0x00007fff9368a570 WebCore::Style::attachRenderTree(WebCore::Element&amp;, WebCore::RenderStyle&amp;, WebCore::RenderTreePosition&amp;, WTF::PassRefPtr&lt;WebCore::RenderStyle&gt;) + 1184
9   com.apple.WebCore             	0x00007fff9368a9d0 WebCore::Style::attachChildren(WebCore::ContainerNode&amp;, WebCore::RenderStyle&amp;, WebCore::RenderTreePosition&amp;) + 160
10  com.apple.WebCore             	0x00007fff9368a570 WebCore::Style::attachRenderTree(WebCore::Element&amp;, WebCore::RenderStyle&amp;, WebCore::RenderTreePosition&amp;, WTF::PassRefPtr&lt;WebCore::RenderStyle&gt;) + 1184</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1093747</commentid>
    <comment_count>1</comment_count>
    <who name="Antti Koivisto">koivisto</who>
    <bug_when>2015-05-11 07:02:00 -0700</bug_when>
    <thetext>rdar://problem/20727702</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1093750</commentid>
    <comment_count>2</comment_count>
      <attachid>252859</attachid>
    <who name="Antti Koivisto">koivisto</who>
    <bug_when>2015-05-11 07:13:34 -0700</bug_when>
    <thetext>Created attachment 252859
patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1093775</commentid>
    <comment_count>3</comment_count>
      <attachid>252859</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2015-05-11 09:27:42 -0700</bug_when>
    <thetext>Comment on attachment 252859
patch

Clearing flags on attachment: 252859

Committed r184104: &lt;http://trac.webkit.org/changeset/184104&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1093776</commentid>
    <comment_count>4</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2015-05-11 09:27:46 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>252859</attachid>
            <date>2015-05-11 07:13:34 -0700</date>
            <delta_ts>2015-05-11 09:27:42 -0700</delta_ts>
            <desc>patch</desc>
            <filename>mask-image-crash.patch</filename>
            <type>text/plain</type>
            <size>3113</size>
            <attacher name="Antti Koivisto">koivisto</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09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</data>

          </attachment>
      

    </bug>

</bugzilla>