Bug 250981

Summary: Nullptr crash under CustomPropertyRegistry::registerFromStylesheet
Product: WebKit Reporter: Antti Koivisto <koivisto>
Component: CSSAssignee: Antti Koivisto <koivisto>
Status: RESOLVED FIXED    
Severity: Normal CC: webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

Antti Koivisto
Reported 2023-01-22 08:25:48 PST
<style> @property --a { syntax: 'foo'; inherits: false; initial-value: foo; } </style> <script> onload = () => { document.open(); document.createElement('div').style.width = '0'; }; </script>
Attachments
Antti Koivisto
Comment 1 2023-01-22 08:26:18 PST
Antti Koivisto
Comment 2 2023-01-22 08:39:09 PST
EWS
Comment 3 2023-01-22 09:31:19 PST
Committed 259188@main (9b2b18b81262): <https://commits.webkit.org/259188@main> Reviewed commits have been landed. Closing PR #8954 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.