Bug 48741

Summary: Check for NULL node in SVGUseElement::associateInstancesWithShadowTreeElements loop
Product: WebKit Reporter: Justin Schuh <jschuh>
Component: SVGAssignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Normal CC: commit-queue, mdelaney7, zimmermann
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: PC   
OS: OS X 10.5   
Attachments:
Description Flags
Patch none

Description Justin Schuh 2010-10-31 19:59:59 PDT 
Here's a test case that triggers a NULL deref crash:

<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
    <set id="set"/>
    <use id="use" xlink:href="#set">x</use>
    <use xlink:href="#use"/>
</svg>

Patch forthcoming.
Comment 1 Justin Schuh 2010-10-31 20:02:03 PDT 
Created attachment 72482 [details]
Patch
Comment 2 Dirk Schulze 2010-11-01 00:33:54 PDT 
Comment on attachment 72482 [details]
Patch

r=me
Comment 3 WebKit Commit Bot 2010-11-01 08:22:25 PDT 
The commit-queue encountered the following flaky tests while processing attachment 72482 [details]:

webarchive/test-link-rel-icon.html

Please file bugs against the tests.  These tests were authored by ddkilzer@webkit.org.  The commit-queue is continuing to process your patch.
Comment 4 WebKit Commit Bot 2010-11-01 08:23:51 PDT 
Comment on attachment 72482 [details]
Patch

Clearing flags on attachment: 72482

Committed r71027: <http://trac.webkit.org/changeset/71027>
Comment 5 WebKit Commit Bot 2010-11-01 08:23:57 PDT 
All reviewed patches have been landed.  Closing bug.