<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>48741</bug_id>
          
          <creation_ts>2010-10-31 19:59:59 -0700</creation_ts>
          <short_desc>Check for NULL node in SVGUseElement::associateInstancesWithShadowTreeElements loop</short_desc>
          <delta_ts>2010-11-01 08:23:57 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>SVG</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>PC</rep_platform>
          <op_sys>OS X 10.5</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Justin Schuh">jschuh</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>commit-queue</cc>
    
    <cc>mdelaney7</cc>
    
    <cc>zimmermann</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>302547</commentid>
    <comment_count>0</comment_count>
    <who name="Justin Schuh">jschuh</who>
    <bug_when>2010-10-31 19:59:59 -0700</bug_when>
    <thetext>Here&apos;s a test case that triggers a NULL deref crash:

&lt;svg xmlns=&quot;http://www.w3.org/2000/svg&quot; xmlns:xlink=&quot;http://www.w3.org/1999/xlink&quot;&gt;
    &lt;set id=&quot;set&quot;/&gt;
    &lt;use id=&quot;use&quot; xlink:href=&quot;#set&quot;&gt;x&lt;/use&gt;
    &lt;use xlink:href=&quot;#use&quot;/&gt;
&lt;/svg&gt;

Patch forthcoming.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>302548</commentid>
    <comment_count>1</comment_count>
      <attachid>72482</attachid>
    <who name="Justin Schuh">jschuh</who>
    <bug_when>2010-10-31 20:02:03 -0700</bug_when>
    <thetext>Created attachment 72482
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>302581</commentid>
    <comment_count>2</comment_count>
      <attachid>72482</attachid>
    <who name="Dirk Schulze">krit</who>
    <bug_when>2010-11-01 00:33:54 -0700</bug_when>
    <thetext>Comment on attachment 72482
Patch

r=me</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>302697</commentid>
    <comment_count>3</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2010-11-01 08:22:25 -0700</bug_when>
    <thetext>The commit-queue encountered the following flaky tests while processing attachment 72482:

webarchive/test-link-rel-icon.html

Please file bugs against the tests.  These tests were authored by ddkilzer@webkit.org.  The commit-queue is continuing to process your patch.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>302699</commentid>
    <comment_count>4</comment_count>
      <attachid>72482</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2010-11-01 08:23:51 -0700</bug_when>
    <thetext>Comment on attachment 72482
Patch

Clearing flags on attachment: 72482

Committed r71027: &lt;http://trac.webkit.org/changeset/71027&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>302700</commentid>
    <comment_count>5</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2010-11-01 08:23:57 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>72482</attachid>
            <date>2010-10-31 20:02:03 -0700</date>
            <delta_ts>2010-11-01 08:23:50 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-48741-20101031200202.patch</filename>
            <type>text/plain</type>
            <size>2965</size>
            <attacher name="Justin Schuh">jschuh</attacher>
            
              <data encoding="base64">SW5kZXg6IFdlYkNvcmUvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvQ2hhbmdlTG9n
CShyZXZpc2lvbiA3MTAwNykKKysrIFdlYkNvcmUvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBA
IC0xLDMgKzEsMTUgQEAKKzIwMTAtMTAtMzEgIEp1c3RpbiBTY2h1aCAgPGpzY2h1aEBjaHJvbWl1
bS5vcmc+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAg
Q2hlY2sgZm9yIE5VTEwgbm9kZSBpbiBTVkdVc2VFbGVtZW50Ojphc3NvY2lhdGVJbnN0YW5jZXNX
aXRoU2hhZG93VHJlZUVsZW1lbnRzIGxvb3AKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5v
cmcvc2hvd19idWcuY2dpP2lkPTQ4NzQxCisKKyAgICAgICAgVGVzdDogc3ZnL2N1c3RvbS91c2Ut
b24tdXNlLXdpdGgtY2hpbGQtYW5kLWVtcHR5LXRhcmdldC5zdmcKKworICAgICAgICAqIHN2Zy9T
VkdVc2VFbGVtZW50LmNwcDoKKyAgICAgICAgKFdlYkNvcmU6OlNWR1VzZUVsZW1lbnQ6OmFzc29j
aWF0ZUluc3RhbmNlc1dpdGhTaGFkb3dUcmVlRWxlbWVudHMpOgorCiAyMDEwLTEwLTMxICBLZW5p
Y2hpIElzaGliYXNoaSAgPGJhc2hpQGdvb2dsZS5jb20+CiAKICAgICAgICAgUmV2aWV3ZWQgYnkg
QWRhbSBCYXJ0aC4KSW5kZXg6IFdlYkNvcmUvc3ZnL1NWR1VzZUVsZW1lbnQuY3BwCj09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT0KLS0tIFdlYkNvcmUvc3ZnL1NWR1VzZUVsZW1lbnQuY3BwCShyZXZpc2lvbiA3MDk5OSkKKysr
IFdlYkNvcmUvc3ZnL1NWR1VzZUVsZW1lbnQuY3BwCSh3b3JraW5nIGNvcHkpCkBAIC05NDgsNiAr
OTQ4LDkgQEAgdm9pZCBTVkdVc2VFbGVtZW50Ojphc3NvY2lhdGVJbnN0YW5jZXNXaQogICAgICAg
ICB3aGlsZSAobm9kZSAmJiAhbm9kZS0+aXNTVkdFbGVtZW50KCkpCiAgICAgICAgICAgIG5vZGUg
PSBub2RlLT5uZXh0U2libGluZygpOwogCisgICAgICAgIGlmICghbm9kZSkKKyAgICAgICAgICAg
IGJyZWFrOworCiAgICAgICAgIGFzc29jaWF0ZUluc3RhbmNlc1dpdGhTaGFkb3dUcmVlRWxlbWVu
dHMobm9kZSwgaW5zdGFuY2UpOwogICAgICAgICBub2RlID0gbm9kZS0+bmV4dFNpYmxpbmcoKTsK
ICAgICB9CkluZGV4OiBMYXlvdXRUZXN0cy9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gTGF5b3V0
VGVzdHMvQ2hhbmdlTG9nCShyZXZpc2lvbiA3MTAwNykKKysrIExheW91dFRlc3RzL0NoYW5nZUxv
Zwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDEzIEBACisyMDEwLTEwLTMxICBKdXN0aW4gU2No
dWggIDxqc2NodWhAY2hyb21pdW0ub3JnPgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAo
T09QUyEpLgorCisgICAgICAgIENoZWNrIGZvciBOVUxMIG5vZGUgaW4gU1ZHVXNlRWxlbWVudDo6
YXNzb2NpYXRlSW5zdGFuY2VzV2l0aFNoYWRvd1RyZWVFbGVtZW50cyBsb29wCisgICAgICAgIGh0
dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD00ODc0MQorCisgICAgICAgICog
c3ZnL2N1c3RvbS91c2Utb24tdXNlLXdpdGgtY2hpbGQtYW5kLWVtcHR5LXRhcmdldC1leHBlY3Rl
ZC50eHQ6IEFkZGVkLgorICAgICAgICAqIHN2Zy9jdXN0b20vdXNlLW9uLXVzZS13aXRoLWNoaWxk
LWFuZC1lbXB0eS10YXJnZXQuc3ZnOiBBZGRlZC4KKwogMjAxMC0xMC0zMSAgSmVyZW15IE1vc2tv
dmljaCAgPGplcmVteUBjaHJvbWl1bS5vcmc+CiAKICAgICAgICAgUmV2aWV3ZWQgYnkgT2phbiBW
YWZhaS4KSW5kZXg6IExheW91dFRlc3RzL3N2Zy9jdXN0b20vdXNlLW9uLXVzZS13aXRoLWNoaWxk
LWFuZC1lbXB0eS10YXJnZXQtZXhwZWN0ZWQudHh0Cj09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIExheW91dFRlc3Rz
L3N2Zy9jdXN0b20vdXNlLW9uLXVzZS13aXRoLWNoaWxkLWFuZC1lbXB0eS10YXJnZXQtZXhwZWN0
ZWQudHh0CShyZXZpc2lvbiAwKQorKysgTGF5b3V0VGVzdHMvc3ZnL2N1c3RvbS91c2Utb24tdXNl
LXdpdGgtY2hpbGQtYW5kLWVtcHR5LXRhcmdldC1leHBlY3RlZC50eHQJKHJldmlzaW9uIDApCkBA
IC0wLDAgKzEsMiBAQAorUEFTUzogVGhpcyBzaG91bGQgbm90IGNyYXNoLgorCkluZGV4OiBMYXlv
dXRUZXN0cy9zdmcvY3VzdG9tL3VzZS1vbi11c2Utd2l0aC1jaGlsZC1hbmQtZW1wdHktdGFyZ2V0
LnN2Zwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9zdmcvY3VzdG9tL3VzZS1vbi11c2Utd2l0
aC1jaGlsZC1hbmQtZW1wdHktdGFyZ2V0LnN2ZwkocmV2aXNpb24gMCkKKysrIExheW91dFRlc3Rz
L3N2Zy9jdXN0b20vdXNlLW9uLXVzZS13aXRoLWNoaWxkLWFuZC1lbXB0eS10YXJnZXQuc3ZnCShy
ZXZpc2lvbiAwKQpAQCAtMCwwICsxLDEwIEBACis8c3ZnIHhtbG5zPSJodHRwOi8vd3d3LnczLm9y
Zy8yMDAwL3N2ZyIgeG1sbnM6eGxpbms9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkveGxpbmsiPg0K
KyAgICA8c2NyaXB0Pg0KKyAgICAgICAgaWYgKHdpbmRvdy5sYXlvdXRUZXN0Q29udHJvbGxlcikN
CisgICAgICAgICAgICBsYXlvdXRUZXN0Q29udHJvbGxlci5kdW1wQXNUZXh0KCk7DQorICAgIDwv
c2NyaXB0Pg0KKyAgICA8dGV4dCB5PSIyMCI+UEFTUzogVGhpcyBzaG91bGQgbm90IGNyYXNoLjwv
dGV4dD4NCisgICAgPHNldCBpZD0ic2V0Ii8+DQorICAgIDx1c2UgaWQ9InVzZSIgeGxpbms6aHJl
Zj0iI3NldCI+eDwvdXNlPg0KKyAgICA8dXNlIHhsaW5rOmhyZWY9IiN1c2UiLz4NCis8L3N2Zz4N
Cg==
</data>

          </attachment>
      

    </bug>

</bugzilla>