<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>26402</bug_id>
          
          <creation_ts>2009-06-15 03:56:39 -0700</creation_ts>
          <short_desc>Accessing attributes of an object created with &quot;document.implementation.createDocumentType&quot; causes NULL pointers</short_desc>
          <delta_ts>2019-02-06 09:03:24 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>DOM</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc>http://skypher.com/SkyLined/Repro/WebKit/Bug%2026402%20-%20Accessing%20attributes%20of%20an%20object%20created%20with%20%22document.implementation.createDocumentType%22%20causes%20NULL%20pointers/repro.html</bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>GoogleBug, InRadar</keywords>
          <priority>P1</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Berend-Jan Wever">skylined</reporter>
          <assigned_to name="Alexey Proskuryakov">ap</assigned_to>
          <cc>ap</cc>
    
    <cc>cdumez</cc>
    
    <cc>dglazkov</cc>
    
    <cc>eric</cc>
    
    <cc>skylined</cc>
    
    <cc>viapanda</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>125921</commentid>
    <comment_count>0</comment_count>
    <who name="Berend-Jan Wever">skylined</who>
    <bug_when>2009-06-15 03:56:39 -0700</bug_when>
    <thetext>Accessing properties/calling methods of an object created with &quot;document.implementation.createDocumentType&quot; causes NULL pointer exceptions.

Repro:
&lt;SCRIPT&gt;
  o = document.implementation.createDocumentType(&apos;x&apos;);
  for (i in o) {
    try { o[i]; } catch (e) {}
    try { o[i](); } catch (e) {}
  }
&lt;/SCRIPT&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>125922</commentid>
    <comment_count>1</comment_count>
    <who name="Berend-Jan Wever">skylined</who>
    <bug_when>2009-06-15 03:59:37 -0700</bug_when>
    <thetext>Added lin to repro</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>125923</commentid>
    <comment_count>2</comment_count>
    <who name="Berend-Jan Wever">skylined</who>
    <bug_when>2009-06-15 04:01:31 -0700</bug_when>
    <thetext>Chromium bug: http://code.google.com/p/chromium/issues/detail?id=14091</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>126423</commentid>
    <comment_count>3</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2009-06-17 01:56:39 -0700</bug_when>
    <thetext>I&apos;m sure there are more issues with DOM code not expecting that Node::document() can return NULL, because it&apos;s so rare.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>139436</commentid>
    <comment_count>4</comment_count>
    <who name="Olivier">viapanda</who>
    <bug_when>2009-08-12 11:14:04 -0700</bug_when>
    <thetext>If I understand well http://www.w3.org/TR/2000/REC-DOM-Level-2-Core-20001113/core.html there is only two cases where Node::document() would be null:
 * with a document
 * with a not yet attached documentType


If the former, nothing you can access in javascript do crash.

If the latter, the following will crash:
 * Node::childNodes (because of document()-&gt;addNodeListCache())
 * Node::addEventListener (because of !document-&gt;attached())
 * Node::removeEventListener
And nothing else.

Hope that helps...</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>139437</commentid>
    <comment_count>5</comment_count>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2009-08-12 11:17:12 -0700</bug_when>
    <thetext>I feel like I&apos;ve seen a dupe of this... possibly even worked on a dupe of this.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>139438</commentid>
    <comment_count>6</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2009-08-12 11:20:16 -0700</bug_when>
    <thetext>&lt;rdar://problem/7137337&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>144650</commentid>
    <comment_count>7</comment_count>
      <attachid>39021</attachid>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2009-09-03 17:23:04 -0700</bug_when>
    <thetext>Created attachment 39021
proposed fix

(In reply to comment #4)
&gt; Hope that helps...

Thanks, it definitely helped!</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>144724</commentid>
    <comment_count>8</comment_count>
      <attachid>39021</attachid>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2009-09-04 00:35:51 -0700</bug_when>
    <thetext>Comment on attachment 39021
proposed fix

Seems this could caus trouble:
59 Name: svn:eol-style
610   + native</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>144725</commentid>
    <comment_count>9</comment_count>
      <attachid>39021</attachid>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2009-09-04 00:37:27 -0700</bug_when>
    <thetext>Comment on attachment 39021
proposed fix

Otherwise this looks fine.  V8 changes will likely be needed eventually, but someone else can figure those out.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>144827</commentid>
    <comment_count>10</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2009-09-04 09:35:35 -0700</bug_when>
    <thetext>Committed &lt;http://trac.webkit.org/changeset/48055&gt;.

(In reply to comment #8)
&gt; Seems this could caus trouble:
&gt; 59 Name: svn:eol-style
&gt; 610   + native

Will it? Almost all of my patches in the recent years had this.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>144993</commentid>
    <comment_count>11</comment_count>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2009-09-05 01:30:15 -0700</bug_when>
    <thetext>Is run-webkit-tests/DumpRenderTree smart enough to handle expected results with non-unix line endings?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>145036</commentid>
    <comment_count>12</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2009-09-05 23:06:12 -0700</bug_when>
    <thetext>No idea, I don&apos;t have any setup that would use non-Unix line endings. I think the right question is - did this (*-expected.txt file line ending style) ever cause problems before?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>147833</commentid>
    <comment_count>13</comment_count>
    <who name="Dimitri Glazkov (Google)">dglazkov</who>
    <bug_when>2009-09-17 10:26:30 -0700</bug_when>
    <thetext>V8 bindings fix coming up.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>147835</commentid>
    <comment_count>14</comment_count>
      <attachid>39704</attachid>
    <who name="Dimitri Glazkov (Google)">dglazkov</who>
    <bug_when>2009-09-17 10:27:51 -0700</bug_when>
    <thetext>Created attachment 39704
Fix detached doctype crashes, v1.

 WebCore/ChangeLog                    |   14 ++++++++++++++
 WebCore/bindings/v8/V8DOMWrapper.cpp |    6 +++++-
 2 files changed, 19 insertions(+), 1 deletions(-)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>147874</commentid>
    <comment_count>15</comment_count>
      <attachid>39704</attachid>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2009-09-17 11:57:10 -0700</bug_when>
    <thetext>Comment on attachment 39704
Fix detached doctype crashes, v1.

LGTM.  We probably should have used a separate bug for this. :)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>147879</commentid>
    <comment_count>16</comment_count>
    <who name="Dimitri Glazkov (Google)">dglazkov</who>
    <bug_when>2009-09-17 12:06:35 -0700</bug_when>
    <thetext>Landed as http://trac.webkit.org/changeset/48480.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>147889</commentid>
    <comment_count>17</comment_count>
    <who name="Dimitri Glazkov (Google)">dglazkov</who>
    <bug_when>2009-09-17 12:20:51 -0700</bug_when>
    <thetext>Landed as http://trac.webkit.org/changeset/48480.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1502960</commentid>
    <comment_count>18</comment_count>
    <who name="Lucas Forschler">lforschler</who>
    <bug_when>2019-02-06 09:03:24 -0800</bug_when>
    <thetext>Mass moving XML DOM bugs to the &quot;DOM&quot; Component.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>39021</attachid>
            <date>2009-09-03 17:23:04 -0700</date>
            <delta_ts>2009-09-04 00:37:27 -0700</delta_ts>
            <desc>proposed fix</desc>
            <filename>DocumentType.txt</filename>
            <type>text/plain</type>
            <size>6722</size>
            <attacher name="Alexey Proskuryakov">ap</attacher>
            
              <data encoding="base64">SW5kZXg6IFdlYkNvcmUvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09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=
</data>
<flag name="review"
          id="20040"
          type_id="1"
          status="+"
          setter="eric"
    />
    <flag name="commit-queue"
          id="20070"
          type_id="3"
          status="-"
          setter="eric"
    />
          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>39704</attachid>
            <date>2009-09-17 10:27:51 -0700</date>
            <delta_ts>2009-09-17 11:57:09 -0700</delta_ts>
            <desc>Fix detached doctype crashes, v1.</desc>
            <filename>Fix-detached-doctype-crashes-v1..patch</filename>
            <type>text/plain</type>
            <size>1701</size>
            <attacher name="Dimitri Glazkov (Google)">dglazkov</attacher>
            
              <data encoding="base64">ODk3MzM5MjE0ODlhNDIzZGJiNzJiNjdmMDNlNTllOWNhNzhlNWUzMApkaWZmIC0tZ2l0IGEvV2Vi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</data>
<flag name="review"
          id="20832"
          type_id="1"
          status="+"
          setter="eric"
    />
          </attachment>
      

    </bug>

</bugzilla>