Title: [145013] trunk/Source/WebCore
- Revision
- 145013
- Author
- [email protected]
- Date
- 2013-03-06 17:24:42 -0800 (Wed, 06 Mar 2013)
Log Message
Crash in SVGViewSpec::viewTarget
https://bugs.webkit.org/show_bug.cgi?id=111648
Reviewed by Philip Rogers.
* svg/SVGViewSpec.cpp:
(WebCore::SVGViewSpec::viewTarget):
Modified Paths
Diff
Modified: trunk/Source/WebCore/ChangeLog (145012 => 145013)
--- trunk/Source/WebCore/ChangeLog 2013-03-07 01:17:41 UTC (rev 145012)
+++ trunk/Source/WebCore/ChangeLog 2013-03-07 01:24:42 UTC (rev 145013)
@@ -1,3 +1,13 @@
+2013-03-06 Abhishek Arya <[email protected]>
+
+ Crash in SVGViewSpec::viewTarget
+ https://bugs.webkit.org/show_bug.cgi?id=111648
+
+ Reviewed by Philip Rogers.
+
+ * svg/SVGViewSpec.cpp:
+ (WebCore::SVGViewSpec::viewTarget):
+
2013-03-06 Benjamin Poulain <[email protected]>
WebKitTestRunner needs layoutTestController.elementDoesAutoCompleteForElementWithId
Modified: trunk/Source/WebCore/svg/SVGViewSpec.cpp (145012 => 145013)
--- trunk/Source/WebCore/svg/SVGViewSpec.cpp 2013-03-07 01:17:41 UTC (rev 145012)
+++ trunk/Source/WebCore/svg/SVGViewSpec.cpp 2013-03-07 01:24:42 UTC (rev 145013)
@@ -142,7 +142,10 @@
{
if (!m_contextElement)
return 0;
- return static_cast<SVGElement*>(m_contextElement->treeScope()->getElementById(m_viewTargetString));
+ Element* element = m_contextElement->treeScope()->getElementById(m_viewTargetString);
+ if (!element || !element->isSVGElement())
+ return 0;
+ return static_cast<SVGElement*>(element);
}
SVGTransformListPropertyTearOff* SVGViewSpec::transform()
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
