Loading a 0-length image into a frame causes a crash due to dereferencing a nil m_imageElement pointer in ImageTokenizer.
Created attachment 9812 [details] Patch, including change log and test
Comment on attachment 9812 [details] Patch, including change log and test r=me
Committed revision 15766.
*** Bug 9987 has been marked as a duplicate of this bug. ***