Bug 13417

Summary:

Repro crash when the first argument to getMatchedCSSRules is not an element

Product:

WebKit

Reporter:

mitz

Component:

CSS

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED FIXED

Severity:

Major

Keywords:

HasReduction

Priority:

Version:

523.x (Safari 3)

Hardware:

Mac

OS:

OS X 10.4

URL:

javascript:getMatchedCSSRules(null, "", false)

Attachments:

Description	Flags
Add null check	darin: review+

Description mitz 2007-04-20 04:04:17 PDT

To reproduce, open the URL. The release build crashes, the debug build fails the ASSERT in Node::document().

Comment 1 mitz 2007-04-20 04:05:12 PDT

Created attachment 14108 [details]
Add null check

Includes layout test and change log.

Comment 2 Darin Adler 2007-04-20 08:05:38 PDT

Comment on attachment 14108 [details]
Add null check

r=me

Comment 3 Mark Rowe (bdash) 2007-04-21 01:33:41 PDT

Landed in r20993.