[Webkit-unassigned] [Bug 27693] Crash with DOM manipulation of <use> elements

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=27693


Charles Wei <charles.wei at torchmobile.com.cn> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #40189|                            |review?
               Flag|                            |




--- Comment #2 from Charles Wei <charles.wei at torchmobile.com.cn>  2009-09-27 00:30:08 PDT ---
Created an attachment (id=40189)
 --> (https://bugs.webkit.org/attachment.cgi?id=40189)
patch that fixes crash caused by using a symbol that doesn't exist

When a symbol that was referenced by a <use> does not exist,  the SVGUseElement
doesn't bother to build the instance tree and shadow tree in
SVGUseElement::buildPendingResource().  Thus in :

static bool shadowTreeContainsChangedNodes(SVGElementInstance* target)

we should first check if target exists,  if target is NULL, we just return
false.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.