[Webkit-unassigned] [Bug 17771] SVGImage accesses m_frame w/o checking for NULL

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=17771





------- Comment #2 from eric at webkit.org  2008-03-13 20:29 PDT -------
(In reply to comment #1)
> Created an attachment (id=19753)
 --> (http://bugs.webkit.org/attachment.cgi?id=19753&action=view) [edit]
> Fix crash
> 
>  WebCore/svg/graphics/SVGImage.cpp |    8 ++++++++
>  1 files changed, 8 insertions(+), 0 deletions(-)
> 

I failed to figure out how to make a test case for this.  I've only seen this
crash once, but the code definitely looks wrong.  I expect this happens when
the SVGImage not yet done loading, and is asked to layout.  I tried using an
empty SVGImage, but that just produced an error icon.  I also tried creating an
http test, but wasn't successful.  Perhaps someone with some http test foo
would like to guide me through such a process.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.