[Webkit-unassigned] [Bug 159288] Prevent crash when attempting to copy an image

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=159288

Brent Fulgham <bfulgham at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |bfulgham at webkit.org
           Hardware|Unspecified                 |iOS
                 OS|Unspecified                 |All
           Assignee|webkit-unassigned at lists.web |bfulgham at webkit.org
                   |kit.org                     |

--- Comment #1 from Brent Fulgham <bfulgham at webkit.org> ---
This is due to a null-pointer dereference in WebPage::performActionOnElement.

In this test case, the HTMLImageElement's renderer does not have a valid cached image. We ask the nullptr for its URL, and the process crashes.

This could be avoided by a nullptr check, but the method we pass the URL to doesn't even use it! So we can avoid the whole issue by simply passing a default URL that can be just as easily ignored as a fully-formed URL (at less cost!).

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160630/3afe0155/attachment.html>