| Summary: | REGRESSION(267280@main): costco.com crash in WebCore::ShorthandSerializer::serializeGridTemplate const | ||||||
|---|---|---|---|---|---|---|---|
| Product: | WebKit | Reporter: | Sammy Gill <sgill26> | ||||
| Component: | CSS | Assignee: | Sammy Gill <sgill26> | ||||
| Status: | RESOLVED FIXED | ||||||
| Severity: | Normal | CC: | w0nka, webkit-bug-importer | ||||
| Priority: | P2 | Keywords: | InRadar | ||||
| Version: | WebKit Nightly Build | ||||||
| Hardware: | Unspecified | ||||||
| OS: | Unspecified | ||||||
| See Also: | https://github.com/web-platform-tests/wpt/pull/41946 | ||||||
| Attachments: |
|
||||||
Pull request: https://github.com/WebKit/WebKit/pull/17661 Submitted web-platform-tests pull request: https://github.com/web-platform-tests/wpt/pull/41946 Committed 267989@main (7d7be769ce2d): <https://commits.webkit.org/267989@main> Reviewed commits have been landed. Closing PR #17661 and removing active labels. *** Bug 261760 has been marked as a duplicate of this bug. *** |
Created attachment 467643 [details] Testcase Costco's checkout page uses element.TextContent = "" and this ends up disconnecting some nodes from the tree. When the ShorthandSerializer tries to get the value for each of the longhands of grid-template, the ComputedStyleExtractor is unable to resolve the RenderStyle to use via computeRenderStyleForProperty and returns nullptr for the longhand value. This results in a hard nullptr deref ShorthandSerializer::longhandValue