Bug 55359 – WebCore::Editor::selectionStartCSSPropertyValue crashes is no font size is supplied

• Component: HTML Editing
• Status: RESOLVED DUPLICATE

[Berend-Jan Wever]

Created attachment 84034 [details]
Repro

Chromium: http://code.google.com/p/chromium/issues/detail?id=74392
Variation of: bug 45068

Repro:
<script>document.queryCommandValue("FontSize")</script>

id:             chrome.dll!WebCore::Editor::selectionStartCSSPropertyValue ReadAV@NULL (07e9b856f4be9e9f44daffbf76cc4066)
description:    Attempt to read from unallocated NULL pointer+0x4 in chrome.dll!WebCore::Editor::selectionStartCSSPropertyValue
stack:          chrome.dll!WebCore::Editor::selectionStartCSSPropertyValue
                chrome.dll!WebCore::valueFontSize
                chrome.dll!WebCore::Editor::Command::value
                chrome.dll!WebCore::Document::queryCommandValue
                chrome.dll!WebCore::DocumentInternal::queryCommandValueCallback
                chrome.dll!v8::internal::HandleApiCallHelper<...>
                chrome.dll!v8::internal::Builtin_HandleApiCall
                chrome.dll!v8::internal::Invoke
                chrome.dll!v8::internal::Execution::Call
                ...

[Ryosuke Niwa]

I think this is a duplicate of https://bugs.webkit.org/show_bug.cgi?id=55290.

*** This bug has been marked as a duplicate of bug 55290 ***

[Berend-Jan Wever]

Sorry Ryosuke - I only scanned Chromium bugs for duplicates and didn't find one. I'll make sure to scan both issue trackers in the future.

[Ryosuke Niwa]

(In reply to comment #2)
> Sorry Ryosuke - I only scanned Chromium bugs for duplicates and didn't find one. I'll make sure to scan both issue trackers in the future.

Nah, it's okay.  Thanks a lot for always filing bugs :D.