Bug 31016 - Possible crash in RenderSlider::layout.
Summary: Possible crash in RenderSlider::layout.
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: Layout and Rendering (show other bugs)
Version: 528+ (Nightly build)
Hardware: All All
: P2 Normal
Assignee: David Levin
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-11-02 09:18 PST by David Levin
Modified: 2009-11-02 10:26 PST (History)
0 users

See Also:


Attachments
Proposed fix. (1.29 KB, patch)
2009-11-02 09:22 PST, David Levin
mitz: review+
levin: commit-queue-
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description David Levin 2009-11-02 09:18:54 PST
thumb may be 0 in RenderSlider::layout which is the reason for the if (thumb) checks.

addOverflowFromChild(thumb); uses thumb and is done outside of these checks.
Comment 1 David Levin 2009-11-02 09:22:33 PST
Created attachment 42320 [details]
Proposed fix.
Comment 2 David Levin 2009-11-02 10:26:52 PST
Committed as http://trac.webkit.org/changeset/50417