[Webkit-unassigned] [Bug 48823] New: chrome.dll!WebCore::RenderBox::styleDidChange ReadAV at NULL (5469e3627c960fb7614ab99719952401)
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Tue Nov 2 01:46:35 PDT 2010
https://bugs.webkit.org/show_bug.cgi?id=48823
Summary: chrome.dll!WebCore::RenderBox::styleDidChange
ReadAV at NULL (5469e3627c960fb7614ab99719952401)
Product: WebKit
Version: 528+ (Nightly build)
Platform: PC
URL: http://code.google.com/p/chromium/issues/detail?id=615
60
OS/Version: Windows Vista
Status: NEW
Severity: Normal
Priority: P1
Component: SVG
AssignedTo: webkit-unassigned at lists.webkit.org
ReportedBy: skylined at chromium.org
CC: eric at webkit.org, zimmermann at kde.org,
mdelaney at apple.com
Repro:
<html><head><script>
function go() {
oSVGFEGaussianBlurElement = document.createElementNS("http://www.w3.org/2000/svg","Blr");
document.open();
document.insertBefore(oSVGFEGaussianBlurElement, null);
document.close();
}
</script></head><body onload="go();"></body></html>
id: chrome.dll!WebCore::RenderBox::styleDidChange ReadAV at NULL (5469e3627c960fb7614ab99719952401)
description: Attempt to read from unallocated NULL pointer+0x4 in chrome.dll!WebCore::RenderBox::styleDidChange
application: Chromium 9.0.566.0
stack: chrome.dll!WebCore::RenderBox::styleDidChange
chrome.dll!WebCore::RenderBlock::styleDidChange
chrome.dll!WebCore::RenderObject::setStyle
chrome.dll!WebCore::RenderObject::setAnimatableStyle
chrome.dll!WebCore::Node::createRendererIfNeeded
chrome.dll!WebCore::Element::attach
chrome.dll!WebCore::HTMLConstructionSite::attach<...>
chrome.dll!WebCore::HTMLConstructionSite::insertHTMLBodyElement
chrome.dll!WebCore::HTMLTreeBuilder::processStartTag
chrome.dll!WebCore::HTMLTreeBuilder::defaultForAfterHead
chrome.dll!WebCore::HTMLTreeBuilder::processEndOfFile
chrome.dll!WebCore::HTMLTreeBuilder::constructTreeFromAtomicToken
chrome.dll!WebCore::HTMLTreeBuilder::constructTreeFromToken
chrome.dll!WebCore::HTMLDocumentParser::pumpTokenizer
chrome.dll!WebCore::HTMLDocumentParser::prepareToStopParsing
chrome.dll!WebCore::DocumentWriter::endIfNotLoadingMainResource
chrome.dll!WebCore::Document::close
chrome.dll!WebCore::HTMLDocumentInternal::closeCallback
chrome.dll!v8::internal::HandleApiCallHelper<...>
chrome.dll!v8::internal::Builtin_HandleApiCall
chrome.dll!v8::internal::Invoke
chrome.dll!v8::internal::Execution::Call
...
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list