[Webkit-unassigned] [Bug 90885] New: Accessing the width or height of an image input field caused crash

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=90885

           Summary: Accessing the width or height of an image input field
                    caused crash
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: Forms
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: niels.leenheer at gmail.com


When trying to access the height or width of an image input field which has not been appended to the DOM tree will cause the browser to crash. Confirmed with Chrome 22 (nightlies currently do not work on Mountain Lion).

e = document.createElement('input');
e.type = 'image';

typeof e.height;
> ***CRASH***

e.height;
> ***CRASH***


While the following does work:

e = document.createElement('input');
document.body.appendChild(e);
e.type = 'image';

typeof e.height;
> "number"

e.height
> 13

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.