<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>58501</bug_id>
          
          <creation_ts>2011-04-13 18:38:35 -0700</creation_ts>
          <short_desc>Use HTMLImageElement in Canvas 2D / WebGL before response is ready causes crash</short_desc>
          <delta_ts>2011-06-18 12:49:12 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Canvas</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>PC</rep_platform>
          <op_sys>OS X 10.5</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Zhenyao Mo">zmo</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>cmarrin</cc>
    
    <cc>darin</cc>
    
    <cc>gman</cc>
    
    <cc>kbr</cc>
    
    <cc>mdelaney7</cc>
    
    <cc>zmo</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>385429</commentid>
    <comment_count>0</comment_count>
    <who name="Zhenyao Mo">zmo</who>
    <bug_when>2011-04-13 18:38:35 -0700</bug_when>
    <thetext>This is because cachedImage()-&gt;response().url().string().impl() is null, and hash(null) is not expected, thus crash.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>385431</commentid>
    <comment_count>1</comment_count>
    <who name="Zhenyao Mo">zmo</who>
    <bug_when>2011-04-13 18:39:19 -0700</bug_when>
    <thetext>I am working on a fix for WebGL.  If someone else more familiar with canvas 2d could fix this on the canvas 2d side, it would be great!</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>385437</commentid>
    <comment_count>2</comment_count>
    <who name="Zhenyao Mo">zmo</who>
    <bug_when>2011-04-13 18:42:42 -0700</bug_when>
    <thetext>A test case for WebGL: 

svn checkout https://cvs.khronos.org/svn/repos/registry/trunk/public/webgl
-r 14468

sdk/tests/conformance/tex-image-and-sub-image-2d-with-image.html

Current behavior: crash

correct behavior: no crash</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>386284</commentid>
    <comment_count>3</comment_count>
      <attachid>89716</attachid>
    <who name="Zhenyao Mo">zmo</who>
    <bug_when>2011-04-14 18:53:06 -0700</bug_when>
    <thetext>Created attachment 89716
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>386286</commentid>
    <comment_count>4</comment_count>
    <who name="Zhenyao Mo">zmo</who>
    <bug_when>2011-04-14 18:54:49 -0700</bug_when>
    <thetext>This patch makes sure WebGL won&apos;t process an HTMLImageElement if it&apos;s not ready yet.

mdelaney is getting another patch ready for the rest.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>386731</commentid>
    <comment_count>5</comment_count>
      <attachid>89716</attachid>
    <who name="Kenneth Russell">kbr</who>
    <bug_when>2011-04-15 10:33:05 -0700</bug_when>
    <thetext>Comment on attachment 89716
Patch

Looks good.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>386755</commentid>
    <comment_count>6</comment_count>
    <who name="Zhenyao Mo">zmo</who>
    <bug_when>2011-04-15 11:02:12 -0700</bug_when>
    <thetext>Committed r83992: &lt;http://trac.webkit.org/changeset/83992&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>89716</attachid>
            <date>2011-04-14 18:53:06 -0700</date>
            <delta_ts>2011-04-15 10:33:05 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-58501-20110414185304.patch</filename>
            <type>text/plain</type>
            <size>3717</size>
            <attacher name="Zhenyao Mo">zmo</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09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</data>
<flag name="review"
          id="82438"
          type_id="1"
          status="+"
          setter="kbr"
    />
          </attachment>
      

    </bug>

</bugzilla>