[Webkit-unassigned] [Bug 56393] New: Without checking existence of the renderer of the element, tries to access the enclosing layer.

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=56393

           Summary: Without checking existence of the renderer of the
                    element,tries to access the enclosing layer.
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: S60 Hardware
        OS/Version: S60 3rd edition
            Status: NEW
          Severity: Major
          Priority: P2
         Component: Layout and Rendering
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: suchi.kundu at nokia.com


In function FrameView::windowClipRect(bool clipToContents)  we have following code where we try to access enclosing layer without checking the existence of renderer, which cause crashes in some circumstances.


// Take our owner element and get the clip rect from the enclosing layer.

     Element* elt = m_frame->document()->ownerElement();
     RenderLayer* layer = elt->renderer()->enclosingLayer();

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.