It is clear that many SVG animators functions assume the argument 'targetElement' is not nullptr. Also the caller SVGAnimateElementBase makes sure its targetElement() is not nullptr before calling any of its animator's functions.
Created attachment 433907 [details] Patch
Comment on attachment 433907 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=433907&action=review Non-reviewer's r=me. > Source/WebCore/svg/SVGElement.cpp:580 > + propertyRegistry().setAnimatedPropertyDirty(attributeName, animatedProperty); (Probably should have been in a separate patch.)
Committed r280123 (239835@main): <https://commits.webkit.org/239835@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 433907 [details].
<rdar://problem/80874381>