[Webkit-unassigned] [Bug 26402] Accessing attributes of an object created with "document.implementation.createDocumentType" causes NULL pointers

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Aug 12 11:14:06 PDT 2009


https://bugs.webkit.org/show_bug.cgi?id=26402


Olivier <viapanda at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |viapanda at gmail.com




--- Comment #4 from Olivier <viapanda at gmail.com>  2009-08-12 11:14:04 PDT ---
If I understand well
http://www.w3.org/TR/2000/REC-DOM-Level-2-Core-20001113/core.html there is only
two cases where Node::document() would be null:
 * with a document
 * with a not yet attached documentType


If the former, nothing you can access in javascript do crash.

If the latter, the following will crash:
 * Node::childNodes (because of document()->addNodeListCache())
 * Node::addEventListener (because of !document->attached())
 * Node::removeEventListener
And nothing else.

Hope that helps...

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list