[Webkit-unassigned] [Bug 205217] New: Nullptr crash if SVG element if element parent becomes document node

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Dec 13 13:40:59 PST 2019


https://bugs.webkit.org/show_bug.cgi?id=205217

            Bug ID: 205217
           Summary: Nullptr crash if SVG element if element parent becomes
                    document node
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: All
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Layout and Rendering
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: sunny_he at apple.com
                CC: bfulgham at webkit.org, simon.fraser at apple.com,
                    zalan at apple.com

Add appropriate null checking to ensure that we don't crash in certain edge cases if an SVG element's parent is set to document.

Crash if the element has a transform:
rdar://49890457

Crash if the element is an SVG <text>
rdar://57075206

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20191213/c8268c13/attachment.htm>


More information about the webkit-unassigned mailing list