Bug 48741 - Check for NULL node in SVGUseElement::associateInstancesWithShadowTreeElements loop
Summary: Check for NULL node in SVGUseElement::associateInstancesWithShadowTreeElement...
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: SVG (show other bugs)
Version: 528+ (Nightly build)
Hardware: PC OS X 10.5
: P2 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-10-31 19:59 PDT by Justin Schuh
Modified: 2010-11-01 08:23 PDT (History)
3 users (show)

See Also:


Attachments
Patch (2.90 KB, patch)
2010-10-31 20:02 PDT, Justin Schuh
no flags Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Justin Schuh 2010-10-31 19:59:59 PDT
Here's a test case that triggers a NULL deref crash:

<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
    <set id="set"/>
    <use id="use" xlink:href="#set">x</use>
    <use xlink:href="#use"/>
</svg>

Patch forthcoming.
Comment 1 Justin Schuh 2010-10-31 20:02:03 PDT
Created attachment 72482 [details]
Patch
Comment 2 Dirk Schulze 2010-11-01 00:33:54 PDT
Comment on attachment 72482 [details]
Patch

r=me
Comment 3 WebKit Commit Bot 2010-11-01 08:22:25 PDT
The commit-queue encountered the following flaky tests while processing attachment 72482 [details]:

webarchive/test-link-rel-icon.html

Please file bugs against the tests.  These tests were authored by ddkilzer@webkit.org.  The commit-queue is continuing to process your patch.
Comment 4 WebKit Commit Bot 2010-11-01 08:23:51 PDT
Comment on attachment 72482 [details]
Patch

Clearing flags on attachment: 72482

Committed r71027: <http://trac.webkit.org/changeset/71027>
Comment 5 WebKit Commit Bot 2010-11-01 08:23:57 PDT
All reviewed patches have been landed.  Closing bug.