diff options
| author | Steve Block <steveblock@google.com> | 2012-04-12 12:30:45 +0100 |
|---|---|---|
| committer | Steve Block <steveblock@google.com> | 2012-04-12 17:42:46 +0100 |
| commit | 65f5521b69d0cfd5e011e73412b6c69ffcf0a897 (patch) | |
| tree | 492e64ec6d365f5fd4996ac6849363347c2eb499 /Source/WebCore/css | |
| parent | d60e027437c746fb2412aef1c1cad6b1347c1b5e (diff) | |
| download | external_webkit-65f5521b69d0cfd5e011e73412b6c69ffcf0a897.zip external_webkit-65f5521b69d0cfd5e011e73412b6c69ffcf0a897.tar.gz external_webkit-65f5521b69d0cfd5e011e73412b6c69ffcf0a897.tar.bz2 | |
Cherry-pick WebKit change r94215 to fix a LayoutTest crash
fast/gradients/css3-radial-gradient-crash.html
See http://trac.webkit.org/changeset/94215
Bug: 6328935
Change-Id: I4414885e54a60aa05346c002c40835334685b1cb
Diffstat (limited to 'Source/WebCore/css')
| -rw-r--r-- | Source/WebCore/css/CSSParser.cpp | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/Source/WebCore/css/CSSParser.cpp b/Source/WebCore/css/CSSParser.cpp index b78a6d0..06e895d 100644 --- a/Source/WebCore/css/CSSParser.cpp +++ b/Source/WebCore/css/CSSParser.cpp @@ -5383,6 +5383,8 @@ bool CSSParser::parseRadialGradient(RefPtr<CSSValue>& gradient, CSSGradientRepea // parseFillPosition advances the args next pointer. parseFillPosition(args, centerX, centerY); a = args->current(); + if (!a) + return false; if (centerX || centerY) { // Comma |