Bug 47942 - REGRESSION(66391): http://ligth-arts.all-up.com/ crashes in EventHandler::selectCursor
Summary: REGRESSION(66391): http://ligth-arts.all-up.com/ crashes in EventHandler::sel...
Alias: None
Product: WebKit
Classification: Unclassified
Component: New Bugs (show other bugs)
Version: 528+ (Nightly build)
Hardware: PC OS X 10.5
: P2 Normal
Assignee: Nobody
URL: http://ligth-arts.all-up.com
Depends on:
Reported: 2010-10-19 15:51 PDT by James Robinson
Modified: 2010-10-22 16:39 PDT (History)
1 user (show)

See Also:

Patch (4.62 KB, patch)
2010-10-19 17:04 PDT, James Robinson
no flags Details | Formatted Diff | Diff
Patch (5.59 KB, patch)
2010-10-22 16:28 PDT, James Robinson
dglazkov: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description James Robinson 2010-10-19 15:51:17 PDT
in EventHandler.cpp:1081 image is NULL.  looks like the old code would continue if (!cimage)
Comment 1 James Robinson 2010-10-19 17:04:40 PDT
Created attachment 71231 [details]
Comment 2 James Robinson 2010-10-19 17:07:09 PDT
This fixes the crashes, but it doesn't include a regression test as I'm not sure how to construct one.  The null check in EventHandler.cpp is needed to avoid the crash on startup, the check in CSSComputedStyleDeclaration.cpp is needed so it doesn't crash when opening the inspector.  The rest of the changes are by inspection.  This doesn't appear to regress the existing manual tests.

Any ideas on how to construct regression tests?  I know very little about cursors.

FYI this is one of the top 5 crashers in Chromium nightlies.
Comment 3 Simon Fraser (smfr) 2010-10-19 17:22:31 PDT
The page in question has
body { cursor: url(''), url('http://img715.imageshack.us/img715/4435/cur.png'), auto; }
so we should be able to mimic this in a manual test.
Comment 4 James Robinson 2010-10-22 16:28:21 PDT
Created attachment 71608 [details]
Comment 5 Dimitri Glazkov (Google) 2010-10-22 16:35:54 PDT
Comment on attachment 71608 [details]

Comment 6 James Robinson 2010-10-22 16:39:25 PDT
Committed r70365: <http://trac.webkit.org/changeset/70365>