Merge 92809 - Crash when clicking an SVG <a> link to the local document

Source/WebCore/svg/SVGAElement.cpp

 /*
  * Copyright (C) 2004, 2005, 2008 Nikolas Zimmermann <zimmermann@kde.org>
  * Copyright (C) 2004, 2005, 2007 Rob Buis <buis@kde.org>
  * Copyright (C) 2007 Eric Seidel <eric@webkit.org>
  * Copyright (C) 2010 Apple Inc. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
  * version 2 of the License, or (at your option) any later version.
@@ skipping 152 matching lines @@
 
 #if ENABLE(SVG_ANIMATION)
             if (url[0] == '#') {
                 Element* targetElement = treeScope()->getElementById(url.substring(1));
                 if (SVGSMILElement::isSMILElement(targetElement)) {
                     static_cast<SVGSMILElement*>(targetElement)->beginByLinkActivation();
                     event->setDefaultHandled();
                     return;
                 }
                 // Only allow navigation to internal <view> anchors.
-                if (!targetElement->hasTagName(SVGNames::viewTag))
+                if (targetElement && !targetElement->hasTagName(SVGNames::viewTag))
                     return;
             }
 #endif
 
             // FIXME: Why does the SVG anchor element have this special logic
             // for middle click that the HTML anchor element does not have?
             // Making a middle click open a link in a new window or tab is
             // properly handled at the client level, not inside WebKit; this
             // code should be deleted.
             String target = isMiddleMouseButtonEvent(event) ? "_blank" : this->target();
@@ skipping 50 matching lines @@
         return false;
     if (parentNode() && parentNode()->isSVGElement())
         return parentNode()->childShouldCreateRenderer(child);
 
     return SVGElement::childShouldCreateRenderer(child);
 }
 
 } // namespace WebCore
 
 #endif // ENABLE(SVG)