Issue 2920: NULL ptr in WebCore::HTMLParser::handleError:  
document->documentElement() can return null
http://code.google.com/p/chromium/issues/detail?id=2920

New issue report by [EMAIL PROTECTED]:
Repro: http://skypher.com/SkyLined/Repro/Chrome/AV-
[EMAIL PROTECTED]/repro.html

Expected: Page renders, optionally with JavaScript error.
Actual: NULL pointer AV in renderer.

Source:
bool HTMLParser::handleError(Node* n, bool flat, const AtomicString&
localName, int tagPriority)
{
<<<snip>>>
         } else if (h->hasLocalName(htmlTag)) {
             if (!current->isDocumentNode() ) {
                 if (document->documentElement()->hasTagName(htmlTag)) {

The repro causes "document.m_ documentElement" to be NULL so "document->
documentElement()" returns NULL. "hasTagName" is therefore called with
"this == NULL" which causes an AV in "WebCore::QualifiedName::matches".

This is a WebKit bug and repro's in Safari as well. It does not repro in
nightly, so it must have been fixed.


Issue attributes:
        Status: Available
        Owner: ----
        Labels: Type-Bug Pri-2 OS-All Area-Unknown

-- 
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Chromium-bugs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/chromium-bugs?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to