Bug 590404 - Crash [@ nsURIHashKey::HashKey] with -moz-element in data: document; r=roc a=blocking-final+

layout/generic/crashtests/590404.html

@@ -0,0 +1 @@
+<iframe src="data:text/html,%3Cdiv%20style%3D%22background%3A%20-moz-element(%23e)%22%3Ez"></iframe>

layout/generic/crashtests/crashtests.list

@@ -333,4 +333,5 @@ load 586806-1.html
 load 586806-2.html
 load 586806-3.html
 load 586973-1.html
+load 590404.html
 load 591141.html

layout/svg/base/src/nsSVGEffects.cpp

@@ -392,6 +392,9 @@ GetEffectPropertyForURI(nsIURI *aURI, nsIFrame *aFrame,
                         const FramePropertyDescriptor *aProperty,
                         nsSVGRenderingObserver * (* aCreate)(nsIURI *, nsIFrame *, PRBool))
 {
+  if (!aURI)
+    return nsnull;
+
   FrameProperties props = aFrame->Properties();
   nsSVGEffects::URIObserverHashtable *hashtable =
     static_cast<nsSVGEffects::URIObserverHashtable*>(props.Get(aProperty));