<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>241435</bug_id>
          
          <creation_ts>2022-06-08 13:33:29 -0700</creation_ts>
          <short_desc>RenderImageResource::setCachedImage may produce a null renderer</short_desc>
          <delta_ts>2022-06-14 09:41:29 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Layout and Rendering</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="alan">zalan</reporter>
          <assigned_to name="alan">zalan</assigned_to>
          <cc>bfulgham</cc>
    
    <cc>changseok</cc>
    
    <cc>dylan</cc>
    
    <cc>esprehn+autocc</cc>
    
    <cc>ews-watchlist</cc>
    
    <cc>glenn</cc>
    
    <cc>kondapallykalyan</cc>
    
    <cc>pdr</cc>
    
    <cc>simon.fraser</cc>
    
    <cc>zalan</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1874789</commentid>
    <comment_count>0</comment_count>
    <who name="alan">zalan</who>
    <bug_when>2022-06-08 13:33:29 -0700</bug_when>
    <thetext>&lt;rdar://93714107&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1874793</commentid>
    <comment_count>1</comment_count>
      <attachid>460101</attachid>
    <who name="alan">zalan</who>
    <bug_when>2022-06-08 13:37:42 -0700</bug_when>
    <thetext>Created attachment 460101
[fast-cq]Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1874794</commentid>
    <comment_count>2</comment_count>
      <attachid>460101</attachid>
    <who name="Brent Fulgham">bfulgham</who>
    <bug_when>2022-06-08 13:42:09 -0700</bug_when>
    <thetext>Comment on attachment 460101
[fast-cq]Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=460101&amp;action=review

&gt; Source/WebCore/rendering/RenderImageResource.cpp:67
&gt; +        // removeClient may have destroyed the renderer.

Don&apos;t we still want to set the m_cachedimage value below (even though the existing renderer was possible destroyed)?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1874801</commentid>
    <comment_count>3</comment_count>
      <attachid>460101</attachid>
    <who name="Brent Fulgham">bfulgham</who>
    <bug_when>2022-06-08 13:51:09 -0700</bug_when>
    <thetext>Comment on attachment 460101
[fast-cq]Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=460101&amp;action=review

&gt;&gt; Source/WebCore/rendering/RenderImageResource.cpp:67
&gt;&gt; +        // removeClient may have destroyed the renderer.
&gt; 
&gt; Don&apos;t we still want to set the m_cachedimage value below (even though the existing renderer was possible destroyed)?

I spoke to Alan offline. If &apos;m_renderer&apos; is nullptr, we expect &apos;this&apos; to be nullptr as well, so we should early return.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1874806</commentid>
    <comment_count>4</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2022-06-08 14:02:24 -0700</bug_when>
    <thetext>Committed r295393 (251399@main): &lt;https://commits.webkit.org/251399@main&gt;

All reviewed patches have been landed. Closing bug and clearing flags on attachment 460101.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1875771</commentid>
    <comment_count>5</comment_count>
    <who name="Antoine Quint">graouts</who>
    <bug_when>2022-06-14 08:15:07 -0700</bug_when>
    <thetext>*** Bug 241512 has been marked as a duplicate of this bug. ***</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1875779</commentid>
    <comment_count>6</comment_count>
    <who name="Simon Fraser (smfr)">simon.fraser</who>
    <bug_when>2022-06-14 08:49:18 -0700</bug_when>
    <thetext>Bug 241512 has a user-visible symptom, suggesting that we could create a layout test for this patch.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1875796</commentid>
    <comment_count>7</comment_count>
    <who name="alan">zalan</who>
    <bug_when>2022-06-14 09:33:25 -0700</bug_when>
    <thetext>(In reply to Simon Fraser (smfr) from comment #6)
&gt; Bug 241512 has a user-visible symptom, suggesting that we could create a
&gt; layout test for this patch.
That would be awesome given the speculative nature of this fix.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1875801</commentid>
    <comment_count>8</comment_count>
    <who name="alan">zalan</who>
    <bug_when>2022-06-14 09:41:29 -0700</bug_when>
    <thetext>Yeah I can repro it (and it&apos;s &lt;rdar://94689000&gt;)</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>460101</attachid>
            <date>2022-06-08 13:37:42 -0700</date>
            <delta_ts>2022-06-08 14:02:25 -0700</delta_ts>
            <desc>[fast-cq]Patch</desc>
            <filename>bug-241435-20220608133741.patch</filename>
            <type>text/plain</type>
            <size>1295</size>
            <attacher name="alan">zalan</attacher>
            
              <data encoding="base64">RnJvbSA0Njc1YTU4YTlkYjA1YmRmMTA2YTQ5NTQ1Y2E0YmMxYTgxYmNlNDg0IE1vbiBTZXAgMTcg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</data>

          </attachment>
      

    </bug>

</bugzilla>