[webkit-changes] [WebKit/WebKit] f81050: jsc_fuz/wktr: null ptr deref in WebCore::SVGResour...

[nishajain61]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: f81050aadfd1b78e0993fa1db5695f08a1511117
      https://github.com/WebKit/WebKit/commit/f81050aadfd1b78e0993fa1db5695f08a1511117
  Author: Nisha Jain <nisha_jain at apple.com>
  Date:   2023-10-20 (Fri, 20 Oct 2023)

  Changed paths:
    A LayoutTests/svg/crash-svg-null-maskimage-expected.txt
    A LayoutTests/svg/crash-svg-null-maskimage.html
    M Source/WebCore/rendering/svg/SVGResources.cpp

  Log Message:
  -----------
  jsc_fuz/wktr: null ptr deref in WebCore::SVGResources::buildCachedResources(WebCore::RenderElement const&, WebCore::RenderStyle const&) + 368 (SVGResources.cpp:251)
https://bugs.webkit.org/show_bug.cgi?id=263224
rdar://116386835.

Reviewed by Chris Dumez.

Modified SVGResources::buildCachedResources API in order to consider passed svg with NULL mask-image.

Test : LayoutTests/svg/crash-svg-null-maskimage.html

* Source/WebCore/rendering/svg/SVGResources.cpp : Modified to check if the maskImage variable is not NULL before dereferrencing.
* LayoutTests/svg/crash-svg-null-maskimage.html : Added test case.
* LayoutTests/svg/crash-svg-null-maskimage-expected.txt : Added test expected file.

Canonical link: https://commits.webkit.org/269561@main