Blob Blame History Raw
diff -up qt-everywhere-opensource-src-4.7.0/src/3rdparty/webkit/WebCore/svg/SVGGElement.cpp.CVE-2010-1822-crash-svg-image qt-everywhere-opensource-src-4.7.0/src/3rdparty/webkit/WebCore/svg/SVGGElement.cpp
--- qt-everywhere-opensource-src-4.7.0/src/3rdparty/webkit/WebCore/svg/SVGGElement.cpp.CVE-2010-1822-crash-svg-image	2010-09-10 11:05:20.000000000 +0200
+++ qt-everywhere-opensource-src-4.7.0/src/3rdparty/webkit/WebCore/svg/SVGGElement.cpp	2010-10-25 14:22:06.542771102 +0200
@@ -86,6 +86,11 @@ RenderObject* SVGGElement::createRendere
     return new (arena) RenderSVGTransformableContainer(this);
 }
 
+bool SVGGElement::rendererIsNeeded(RenderStyle*)
+{
+    return parentNode() && parentNode()->isSVGElement(); 
+}
+
 }
 
 #endif // ENABLE(SVG)
diff -up qt-everywhere-opensource-src-4.7.0/src/3rdparty/webkit/WebCore/svg/SVGGElement.h.CVE-2010-1822-crash-svg-image qt-everywhere-opensource-src-4.7.0/src/3rdparty/webkit/WebCore/svg/SVGGElement.h
--- qt-everywhere-opensource-src-4.7.0/src/3rdparty/webkit/WebCore/svg/SVGGElement.h.CVE-2010-1822-crash-svg-image	2010-09-10 11:05:21.000000000 +0200
+++ qt-everywhere-opensource-src-4.7.0/src/3rdparty/webkit/WebCore/svg/SVGGElement.h	2010-10-25 14:28:37.467854695 +0200
@@ -43,6 +43,7 @@ namespace WebCore {
         virtual void parseMappedAttribute(MappedAttribute*);
         virtual void svgAttributeChanged(const QualifiedName&);
         virtual void synchronizeProperty(const QualifiedName&);
+        virtual bool rendererIsNeeded(RenderStyle*);
         virtual void childrenChanged(bool changedByParser = false, Node* beforeChange = 0, Node* afterChange = 0, int childCountDelta = 0);
 
         virtual RenderObject* createRenderer(RenderArena*, RenderStyle*);