thumb may be 0 in RenderSlider::layout which is the reason for the if (thumb) checks. addOverflowFromChild(thumb); uses thumb and is done outside of these checks.
Created attachment 42320 [details] Proposed fix.
Committed as http://trac.webkit.org/changeset/50417