[Webkit-unassigned] [Bug 48741] New: Check for NULL node in SVGUseElement::associateInstancesWithShadowTreeElements loop
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Sun Oct 31 19:59:59 PDT 2010
https://bugs.webkit.org/show_bug.cgi?id=48741
Summary: Check for NULL node in
SVGUseElement::associateInstancesWithShadowTreeElement
s loop
Product: WebKit
Version: 528+ (Nightly build)
Platform: PC
OS/Version: Mac OS X 10.5
Status: NEW
Severity: Normal
Priority: P2
Component: SVG
AssignedTo: webkit-unassigned at lists.webkit.org
ReportedBy: jschuh at chromium.org
CC: zimmermann at kde.org, mdelaney at apple.com
Here's a test case that triggers a NULL deref crash:
<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
<set id="set"/>
<use id="use" xlink:href="#set">x</use>
<use xlink:href="#use"/>
</svg>
Patch forthcoming.
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list