[Webkit-unassigned] [Bug 117815] Fix TextTrackCue::cueIndex() to handle the null case of TextTrack::cues(() properly

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=117815





--- Comment #12 from Ruth Fong <ruthiecftg at gmail.com>  2013-07-02 10:32:15 PST ---
(In reply to comment #10)
> According to that change list:
> 
> However, per HTML rules, a track object returns a non-NULL
> cue list object only if cues haven't been disabled. The
> problem is that in the case for an inband text track, the
> cues are disabled by default, and so the track object
> returns NULL as the value of the cue list pointer. As
> currently implemented, the text track cue object assumes
> that the track's cue list is always non-NULL, but this
> crashes the browser when the pointer value is dereferenced
> to get the cue index.
> 
> Need to verify this is the case; if so, we should probably file a new bug.