Bug 253720

Summary:	Fix undefined behavior in valueFromPool(Span<LazyNeverDestroyed<CSSPrimitiveValue>>, double)
Product:	WebKit	Reporter:	Chris Dumez <cdumez>
Component:	CSS	Assignee:	Chris Dumez <cdumez>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified

Description Chris Dumez 2023-03-10 10:36:50 PST

This undefined behavior was causing crashes in our production builds.

Comment 1 Chris Dumez 2023-03-10 10:36:53 PST

<rdar://problem/106522324>

Comment 2 Chris Dumez 2023-03-10 10:39:14 PST

Pull request: https://github.com/WebKit/WebKit/pull/11369

Comment 3 EWS 2023-03-10 13:21:34 PST

Committed 261527@main (fa8dddf7984e): <https://commits.webkit.org/261527@main>

Reviewed commits have been landed. Closing PR #11369 and removing active labels.