From e5725baa346d81762ed62fe8de8655b34e6801dc Mon Sep 17 00:00:00 2001
From: "Matt A. Tobin" <email@mattatobin.com>
Date: Thu, 16 Apr 2020 16:42:26 -0400
Subject: [PATCH] Bug 1340885 - Null check frame's content when searching for
 NAC ancestors in GetCorrectedParent

Tag #1375
---
 layout/generic/nsFrame.cpp | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/layout/generic/nsFrame.cpp b/layout/generic/nsFrame.cpp
index 845e1236de..c926a460ef 100644
--- a/layout/generic/nsFrame.cpp
+++ b/layout/generic/nsFrame.cpp
@@ -8949,7 +8949,8 @@ GetCorrectedParent(const nsIFrame* aFrame)
   // box, or a non-NAC-backed pseudo like ::first-line) that does not match the
   // one that the NAC implements, if any.
   nsIContent* content = aFrame->GetContent();
-  Element* element = content->IsElement() ? content->AsElement() : nullptr;
+  Element* element =
+    content && content->IsElement() ? content->AsElement() : nullptr;
   if (element && element->IsNativeAnonymous() &&
       element->GetPseudoElementType() == aFrame->StyleContext()->GetPseudoType()) {
     while (parent->GetContent() && parent->GetContent()->IsNativeAnonymous()) {