Bug 66453

Summary: REGRESSION(r90971): Null pointer dereference with placeholder and webkit-scrollbar-corner
Product: WebKit Reporter: Kent Tamura <tkent>
Component: Layout and RenderingAssignee: Kent Tamura <tkent>
Status: RESOLVED FIXED    
Severity: Major CC: dglazkov, hyatt, jamesr, mikelawther, simon.fraser, webkit.review.bot
Priority: P1    
Version: 528+ (Nightly build)   
Hardware: All   
OS: All   
Attachments:
Description Flags
Patch none

Description Kent Tamura 2011-08-17 22:54:11 PDT 
http://code.google.com/p/chromium/issues/detail?id=90726

Repro:
<style>
::-webkit-scrollbar-corner {
    color: Red;
}
</style>
<input placeholder="foo">
<p>Focus on the input and hit Escape</p>
<script>
document.querySelector("input").addEventListener("keydown", function() {
    this.style.display = "none";
});
</script>
Comment 1 Kent Tamura 2011-08-18 00:12:51 PDT 
Created attachment 104308 [details]
Patch
Comment 2 Kent Tamura 2011-08-18 00:39:06 PDT 
(In reply to comment #1)
> Created an attachment (id=104308) [details]
> Patch

I thought this bug can be reproducible without placeholder, but I couldn't make a repro.
I don't know if a RenderBlock with position:relative and visibility:hidden without an enclosing layer is a correct status.
Comment 3 Dimitri Glazkov (Google) 2011-08-18 07:03:42 PDT 
Looks reasonable to me. Dave, Simon?
Comment 4 WebKit Review Bot 2011-08-18 18:33:21 PDT 
Comment on attachment 104308 [details]
Patch

Clearing flags on attachment: 104308

Committed r93382: <http://trac.webkit.org/changeset/93382>
Comment 5 WebKit Review Bot 2011-08-18 18:33:27 PDT 
All reviewed patches have been landed.  Closing bug.