[Webkit-unassigned] [Bug 10429] New: XSLTProcessor.transformToFragment crashes if the owner document is empty

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=10429

           Summary: XSLTProcessor.transformToFragment crashes if the owner
                    document is empty
           Product: WebKit
           Version: 420+ (nightly)
          Platform: Macintosh
        OS/Version: Mac OS X 10.4
            Status: NEW
          Severity: normal
          Priority: P1
         Component: XML
        AssignedTo: webkit-unassigned at opendarwin.org
        ReportedBy: ap at nypop.com


XSLTProcessor.transformToFragment crashes if the owner document is empty.

var ownerDocument = document.implementation.createDocument("", null, null);
processor.transformToFragment(xml, ownerDocument);

Stack trace:

0    WebCore::XMLTokenizer::XMLTokenizer[in-charge](WebCore::DocumentFragment*,
WebCore::Element*) + 540
1    WebCore::parseXMLDocumentFragment(WebCore::String const&,
WebCore::DocumentFragment*, WebCore::Element*) + 48
2    WebCore::XSLTProcessor::transformToFragment(WebCore::Node*,
WebCore::Document*) + 560
3    KJS::XSLTProcessorProtoFunc::callAsFunction(KJS::ExecState*,
KJS::JSObject*, KJS::List const&) + 728


-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.