45345 2010-09-07 17:35:16 -0700 NULL deref when use target is reset, then set to display:none 2010-09-08 05:09:26 -0700 1 1 1 Unclassified WebKit SVG 528+ (Nightly build) PC OS X 10.5 RESOLVED FIXED http://www.croczilla.com/bits_and_pieces/svg/samples/invaders/invaders.svg P2 Normal --- 1 jschuh webkit-unassigned commit-queue jschuh zimmermann oldest_to_newest 275443 0 jschuh 2010-09-07 17:35:16 -0700 This can be triggered when you lose the SVG space invaders game in the linked URL. It's a clean NULL deref, and I'll have a patch shortly. 275461 1 66807 jschuh 2010-09-07 17:47:54 -0700 Created attachment 66807 Patch 275644 2 66807 zimmermann 2010-09-07 23:55:37 -0700 Comment on attachment 66807 Patch Good catch, r=me. 275762 3 66807 commit-queue 2010-09-08 05:09:21 -0700 Comment on attachment 66807 Patch Clearing flags on attachment: 66807 Committed r66973: <http://trac.webkit.org/changeset/66973> 275763 4 commit-queue 2010-09-08 05:09:26 -0700 All reviewed patches have been landed. Closing bug. 66807 2010-09-07 17:47:54 -0700 2010-09-08 05:09:21 -0700 Patch bug-45345-20100907174753.patch text/plain 3434 jschuh SW5kZXg6IFdlYkNvcmUvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvQ2hhbmdlTG9n CShyZXZpc2lvbiA2NjkzNikKKysrIFdlYkNvcmUvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBA IC0xLDMgKzEsMTcgQEAKKzIwMTAtMDktMDcgIEp1c3RpbiBTY2h1aCAgPGpzY2h1aEBjaHJvbWl1 bS5vcmc+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAg TlVMTCBkZXJlZiB3aGVuIHVzZSB0YXJnZXQgaXMgcmVzZXQsIHRoZW4gc2V0IHRvIGRpc3BsYXk6 bm9uZQorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9NDUz NDUKKworICAgICAgICBNb3ZlIHRoZSBOVUxMIGNoZWNrIG9uIHNoYWRvd1Jvb3QgZWFybGllciBp biBTVkdVc2VFbGVtZW50OjpyZWNhbGNTdHlsZQorCisgICAgICAgIFRlc3Q6IHN2Zy9jdXN0b20v dXNlLWRpc3BsYXktbm9uZS5zdmcKKworICAgICAgICAqIHN2Zy9TVkdVc2VFbGVtZW50LmNwcDoK KyAgICAgICAgKFdlYkNvcmU6OlNWR1VzZUVsZW1lbnQ6OnJlY2FsY1N0eWxlKToKKwogMjAxMC0w OS0wNyAgTWloYWkgUGFycGFyaXRhICA8bWloYWlwQGNocm9taXVtLm9yZz4KIAogICAgICAgICBS ZXZpZXdlZCBieSBPbGl2ZXIgSHVudC4KSW5kZXg6IFdlYkNvcmUvc3ZnL1NWR1VzZUVsZW1lbnQu Y3BwCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvc3ZnL1NWR1VzZUVsZW1lbnQuY3BwCShyZXZpc2lv biA2NjkzMikKKysrIFdlYkNvcmUvc3ZnL1NWR1VzZUVsZW1lbnQuY3BwCSh3b3JraW5nIGNvcHkp CkBAIC0zMjYsMTYgKzMyNiwxNiBAQCB2b2lkIFNWR1VzZUVsZW1lbnQ6OnJlY2FsY1N0eWxlKFN0 eWxlQ2hhCiAgICAgaWYgKG1fdXBkYXRlc0Jsb2NrZWQpCiAgICAgICAgIEFTU0VSVCghbV9uZWVk c1NoYWRvd1RyZWVSZWNyZWF0aW9uKTsKIAorICAgIFJlbmRlclNWR1NoYWRvd1RyZWVSb290Q29u dGFpbmVyKiBzaGFkb3dSb290ID0gc3RhdGljX2Nhc3Q8UmVuZGVyU1ZHU2hhZG93VHJlZVJvb3RD b250YWluZXIqPihyZW5kZXJlcigpKTsKKyAgICBpZiAoIXNoYWRvd1Jvb3QpCisgICAgICAgIHJl dHVybjsKKyAgICAKICAgICBib29sIG5lZWRzU3R5bGVVcGRhdGUgPSAhbV9uZWVkc1NoYWRvd1Ry ZWVSZWNyZWF0aW9uOwogICAgIGlmIChtX25lZWRzU2hhZG93VHJlZVJlY3JlYXRpb24pIHsKLSAg ICAgICAgc3RhdGljX2Nhc3Q8UmVuZGVyU1ZHU2hhZG93VHJlZVJvb3RDb250YWluZXIqPihyZW5k ZXJlcigpKS0+bWFya1NoYWRvd1RyZWVGb3JSZWNyZWF0aW9uKCk7CisgICAgICAgIHNoYWRvd1Jv b3QtPm1hcmtTaGFkb3dUcmVlRm9yUmVjcmVhdGlvbigpOwogICAgICAgICBtX25lZWRzU2hhZG93 VHJlZVJlY3JlYXRpb24gPSBmYWxzZTsKICAgICB9CiAKLSAgICBSZW5kZXJTVkdTaGFkb3dUcmVl Um9vdENvbnRhaW5lciogc2hhZG93Um9vdCA9IHN0YXRpY19jYXN0PFJlbmRlclNWR1NoYWRvd1Ry ZWVSb290Q29udGFpbmVyKj4ocmVuZGVyZXIoKSk7Ci0gICAgaWYgKCFzaGFkb3dSb290KQotICAg ICAgICByZXR1cm47Ci0KICAgICBzaGFkb3dSb290LT51cGRhdGVGcm9tRWxlbWVudCgpOwogCiAg ICAgaWYgKCFuZWVkc1N0eWxlVXBkYXRlKQpJbmRleDogTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCj09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT0KLS0tIExheW91dFRlc3RzL0NoYW5nZUxvZwkocmV2aXNpb24gNjY5MzYpCisrKyBM YXlvdXRUZXN0cy9DaGFuZ2VMb2cJKHdvcmtpbmcgY29weSkKQEAgLTEsMyArMSwxMyBAQAorMjAx MC0wOS0wNyAgSnVzdGluIFNjaHVoICA8anNjaHVoQGNocm9taXVtLm9yZz4KKworICAgICAgICBS ZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBOVUxMIGRlcmVmIHdoZW4gdXNl IHRhcmdldCBpcyByZXNldCwgdGhlbiBzZXQgdG8gZGlzcGxheTpub25lCisgICAgICAgIGh0dHBz Oi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD00NTM0NQorCisgICAgICAgICogc3Zn L2N1c3RvbS91c2UtZGlzcGxheS1ub25lLWV4cGVjdGVkLnR4dDogQWRkZWQuCisgICAgICAgICog c3ZnL2N1c3RvbS91c2UtZGlzcGxheS1ub25lLnN2ZzogQWRkZWQuCisKIDIwMTAtMDktMDcgIE1p aGFpIFBhcnBhcml0YSAgPG1paGFpcEBjaHJvbWl1bS5vcmc+CiAKICAgICAgICAgUmV2aWV3ZWQg YnkgT2xpdmVyIEh1bnQuCkluZGV4OiBMYXlvdXRUZXN0cy9zdmcvY3VzdG9tL3VzZS1kaXNwbGF5 LW5vbmUtZXhwZWN0ZWQudHh0Cj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIExheW91dFRlc3RzL3N2Zy9jdXN0b20v dXNlLWRpc3BsYXktbm9uZS1leHBlY3RlZC50eHQJKHJldmlzaW9uIDApCisrKyBMYXlvdXRUZXN0 cy9zdmcvY3VzdG9tL3VzZS1kaXNwbGF5LW5vbmUtZXhwZWN0ZWQudHh0CShyZXZpc2lvbiAwKQpA QCAtMCwwICsxIEBACitQQVNTOiBUaGUgdGV4dCBpcyBkaXNwbGF5ZWQgYW5kIHRoZSBmaWxlIGRp ZCBub3QgdHJpZ2dlciBhIGNyYXNoLgpJbmRleDogTGF5b3V0VGVzdHMvc3ZnL2N1c3RvbS91c2Ut ZGlzcGxheS1ub25lLnN2Zwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9zdmcvY3VzdG9tL3Vz ZS1kaXNwbGF5LW5vbmUuc3ZnCShyZXZpc2lvbiAwKQorKysgTGF5b3V0VGVzdHMvc3ZnL2N1c3Rv bS91c2UtZGlzcGxheS1ub25lLnN2ZwkocmV2aXNpb24gMCkKQEAgLTAsMCArMSwxMiBAQAorPHN2 ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8v d3d3LnczLm9yZy8xOTk5L3hsaW5rIj4KKyAgICA8c3ltYm9sIGlkPSJhIi8+CisgICAgPHVzZSBp ZD0iYiIgeGxpbms6aHJlZj0iI2EiLz4KKyAgICA8c2NyaXB0PgorICAgICAgICBpZiAod2luZG93 LmxheW91dFRlc3RDb250cm9sbGVyKQorICAgICAgICAgICAgbGF5b3V0VGVzdENvbnRyb2xsZXIu ZHVtcEFzVGV4dCgpOworICAgICAgICBiPWRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdiJyk7Cisg ICAgICAgIGIuaHJlZi5iYXNlVmFsPSIjYSI7CisgICAgICAgIGIuc2V0QXR0cmlidXRlKCJkaXNw bGF5Iiwibm9uZSIpOworICAgIDwvc2NyaXB0PgorICAgIDx0ZXh0IHk9IjIwIj5QQVNTOiBUaGUg dGV4dCBpcyBkaXNwbGF5ZWQgYW5kIHRoZSBmaWxlIGRpZCBub3QgdHJpZ2dlciBhIGNyYXNoLjwv dGV4dD4KKzwvc3ZnPgo=