[Webkit-unassigned] [Bug 49902] New: chrome.dll!WebCore::toWebWidgetClient ReadAV at NULL (08ffd4f21a8c6465bb1e19a2f52e4bd5)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=49902

           Summary: chrome.dll!WebCore::toWebWidgetClient ReadAV at NULL
                    (08ffd4f21a8c6465bb1e19a2f52e4bd5)
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
               URL: http://code.google.com/p/chromium/issues/detail?id=640
                    46
        OS/Version: Windows Vista
            Status: NEW
          Severity: Normal
          Priority: P1
         Component: HTML DOM
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: skylined at chromium.org
                CC: eric at webkit.org


Created an attachment (id=74538)
 --> (https://bugs.webkit.org/attachment.cgi?id=74538&action=review)
Repro

Repro:
<img src="data:image/svg+xml,<!DOCTYPEg PUBLIC "/" "1"><g xmlns="http://www.w3.org/2000/svg"><style>@media(device-aspect-ratio:4){*{</style>">
id:             chrome.dll!WebCore::toWebWidgetClient ReadAV at NULL (08ffd4f21a8c6465bb1e19a2f52e4bd5)
description:    Attempt to read from unallocated NULL pointer+0x73 in chrome.dll!WebCore::toWebWidgetClient
application:    Chromium 9.0.586.0
stack:          chrome.dll!WebCore::toWebWidgetClient
                chrome.dll!WebCore::ChromiumBridge::screenRect
                chrome.dll!WebCore::screenRect
                chrome.dll!WebCore::device_aspect_ratioMediaFeatureEval
                chrome.dll!WebCore::MediaQueryEvaluator::eval
                chrome.dll!WebCore::MediaQueryEvaluator::eval
                chrome.dll!WebCore::CSSRuleSet::addRulesFromSheet
                chrome.dll!WebCore::CSSStyleSelector::CSSStyleSelector
                chrome.dll!WebCore::Document::createStyleSelector
                chrome.dll!WebCore::Element::recalcStyle
                chrome.dll!WebCore::Document::recalcStyle
                chrome.dll!WebCore::Document::styleSelectorChanged
                chrome.dll!WebCore::Document::removePendingSheet
                chrome.dll!WebCore::StyleElement::sheetLoaded
                chrome.dll!WebCore::HTMLStyleElement::sheetLoaded
                chrome.dll!WebCore::CSSStyleSheet::checkLoaded
                chrome.dll!WebCore::StyleElement::createSheet
                chrome.dll!WebCore::StyleElement::process
                chrome.dll!WebCore::StyleElement::finishParsingChildren
                chrome.dll!WebCore::SVGStyleElement::finishParsingChildren
                chrome.dll!WebCore::XMLDocumentParser::endElementNs
                chrome.dll!xmlParseEndTag2
                chrome.dll!xmlParseTryOrFinish
                ...

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.