Bug 75227 - NULL ptr in WebCore::SVGStyledTransformableElement::animatedLocalTransform
Summary: NULL ptr in WebCore::SVGStyledTransformableElement::animatedLocalTransform
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: SVG (show other bugs)
Version: 528+ (Nightly build)
Hardware: PC Windows Vista
: P1 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-12-26 05:35 PST by Berend-Jan Wever
Modified: 2012-01-03 11:33 PST (History)
6 users (show)

See Also:


Attachments
Repro (104 bytes, text/html)
2011-12-26 05:35 PST, Berend-Jan Wever
no flags Details
Patch (3.45 KB, patch)
2012-01-03 09:10 PST, Florin Malita
no flags Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Berend-Jan Wever 2011-12-26 05:35:53 PST
Created attachment 120551 [details]
Repro

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=9278916

Fuzzer: Inferno_layout_test_fuzzer

Crash Type: UNKNOWN
Crash Address: 0x000000000008
Crash State:
  - crash stack -
  WebCore::SVGStyledTransformableElement::animatedLocalTransform
  non-virtual thunk to WebCore::SVGStyledTransformableElement::animatedLocalTransform
  WebCore::SVGStyledTransformableElement::localCoordinateSpaceTransform
  
Regressed: https://cluster-fuzz.appspot.com/revisions?range=111368:111501

Minimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv94N78HYOdgNew_8tUlyw2DHa_r16roIX-dDHZRB4s5Z_OztPlCdCILo0cxvZ_DFCtdPbRt2dr-nx69WUHMIdWymUYglOgEnz93XzDIJfxk0Esp3ZOjfcG9aiU9iCWkxZgTt0wseNEJ4NEb5j_t7NxuxBeXqCw

Repro:
<script>
  document.createElementNS("http://www.w3.org/2000/svg","g").getTransformToElement();
</script>
Comment 1 Florin Malita 2012-01-03 09:10:12 PST
Created attachment 120956 [details]
Patch
Comment 2 Dirk Schulze 2012-01-03 09:43:15 PST
Comment on attachment 120956 [details]
Patch

LGTM. r=me
Comment 3 WebKit Review Bot 2012-01-03 11:33:42 PST
Comment on attachment 120956 [details]
Patch

Clearing flags on attachment: 120956

Committed r103950: <http://trac.webkit.org/changeset/103950>
Comment 4 WebKit Review Bot 2012-01-03 11:33:46 PST
All reviewed patches have been landed.  Closing bug.