Bug 66453 - REGRESSION(r90971): Null pointer dereference with placeholder and webkit-scrollbar-corner
Summary: REGRESSION(r90971): Null pointer dereference with placeholder and webkit-scro...
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: Layout and Rendering (show other bugs)
Version: 528+ (Nightly build)
Hardware: All All
: P1 Major
Assignee: Kent Tamura
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-08-17 22:54 PDT by Kent Tamura
Modified: 2011-08-18 18:33 PDT (History)
6 users (show)

See Also:

Attachments
Patch (4.03 KB, patch)
2011-08-18 00:12 PDT, Kent Tamura 		no flags Details | Formatted Diff | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Kent Tamura 2011-08-17 22:54:11 PDT 
http://code.google.com/p/chromium/issues/detail?id=90726

Repro:
<style>
::-webkit-scrollbar-corner {
    color: Red;
}
</style>
<input placeholder="foo">
<p>Focus on the input and hit Escape</p>
<script>
document.querySelector("input").addEventListener("keydown", function() {
    this.style.display = "none";
});
</script>
Comment 1 Kent Tamura 2011-08-18 00:12:51 PDT 
Created attachment 104308 [details]
Patch
Comment 2 Kent Tamura 2011-08-18 00:39:06 PDT 
(In reply to comment #1)
> Created an attachment (id=104308) [details]
> Patch

I thought this bug can be reproducible without placeholder, but I couldn't make a repro.
I don't know if a RenderBlock with position:relative and visibility:hidden without an enclosing layer is a correct status.
Comment 3 Dimitri Glazkov (Google) 2011-08-18 07:03:42 PDT 
Looks reasonable to me. Dave, Simon?
Comment 4 WebKit Review Bot 2011-08-18 18:33:21 PDT 
Comment on attachment 104308 [details]
Patch

Clearing flags on attachment: 104308

Committed r93382: <http://trac.webkit.org/changeset/93382>
Comment 5 WebKit Review Bot 2011-08-18 18:33:27 PDT 
All reviewed patches have been landed.  Closing bug.