Add null-check for LayoutTextControl::innerEditorElement()

third_party/WebKit/Source/core/layout/LayoutTextControl.cpp

 /**
  * Copyright (C) 2006, 2007 Apple Inc. All rights reserved.
  *           (C) 2008 Torch Mobile Inc. All rights reserved. (http://www.torchmobile.com/)
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
  * version 2 of the License, or (at your option) any later version.
  *
  * This library is distributed in the hope that it will be useful,
@@ skipping 221 matching lines @@
     // This matches the unitsPerEm value for MS Shell Dlg and Courier New from the "head" font table.
     float unitsPerEm = 2048.0f;
     return roundf(style()->font().getFontDescription().computedSize() * x / unitsPerEm);
 }
 
 void LayoutTextControl::computeIntrinsicLogicalWidths(LayoutUnit& minLogicalWidth, LayoutUnit& maxLogicalWidth) const
 {
     // Use average character width. Matches IE.
     AtomicString family = style()->font().getFontDescription().family().family();
     maxLogicalWidth = preferredContentLogicalWidth(const_cast<LayoutTextControl*>(this)->getAvgCharWidth(family));
-    if (LayoutBox* innerEditorLayoutBox = innerEditorElement()->layoutBox())
-        maxLogicalWidth += innerEditorLayoutBox->paddingStart() + innerEditorLayoutBox->paddingEnd();
+    if (innerEditorElement()) {
+        if (LayoutBox* innerEditorLayoutBox = innerEditorElement()->layoutBox())
+            maxLogicalWidth += innerEditorLayoutBox->paddingStart() + innerEditorLayoutBox->paddingEnd();
+    }
     if (!style()->logicalWidth().hasPercent())
         minLogicalWidth = maxLogicalWidth;
 }
 
 void LayoutTextControl::computePreferredLogicalWidths()
 {
     ASSERT(preferredLogicalWidthsDirty());
 
     m_minPreferredLogicalWidth = LayoutUnit();
     m_maxPreferredLogicalWidth = LayoutUnit();
@@ skipping 32 matching lines @@
     HTMLElement* placeholder = toHTMLTextFormControlElement(node())->placeholderElement();
     LayoutObject* placeholderLayoutObject = placeholder ? placeholder->layoutObject() : nullptr;
     if (!placeholderLayoutObject)
         return nullptr;
     if (relayoutChildren)
         layoutScope.setChildNeedsLayout(placeholderLayoutObject);
     return placeholderLayoutObject;
 }
 
 } // namespace blink