In certain situations, the platform BGradient could have not been created before Gradient::fill() is called the first time. Enforce its creation by using platformGradient() instead of dereferencing the member directly.
Created attachment 53038 [details] [Haiku] Fix crash in Gradient::fill()
Comment on attachment 53038 [details] [Haiku] Fix crash in Gradient::fill() Thanks.
Comment on attachment 53038 [details] [Haiku] Fix crash in Gradient::fill() Clearing flags on attachment: 53038 Committed r57420: <http://trac.webkit.org/changeset/57420>
All reviewed patches have been landed. Closing bug.