[prev in list] [next in list] [prev in thread] [next in thread]
List: webkit-unassigned
Subject: [Webkit-unassigned] [Bug 235907] New: null ptr deref in LayoutIntegrationLineLayout LineLayout::adju
From: bugzilla-daemon () webkit ! org
Date: 2022-01-31 20:41:20
Message-ID: bug-235907-2851 () https ! bugs ! webkit ! org/
[Download RAW message or body]
--1643661680.D1Afae1e8.21658
Date: Mon, 31 Jan 2022 12:41:20 -0800
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugs.webkit.org/
Auto-Submitted: auto-generated
https://bugs.webkit.org/show_bug.cgi?id=235907
Bug ID: 235907
Summary: null ptr deref in LayoutIntegrationLineLayout
LineLayout::adjustForPagination and
LineLayout::visualOverflowBoundingBoxRectFor
Product: WebKit
Version: WebKit Nightly Build
Hardware: Unspecified
OS: Unspecified
Status: NEW
Keywords: InRadar
Severity: Normal
Priority: P2
Component: Layout and Rendering
Assignee: webkit-unassigned@lists.webkit.org
Reporter: gnavamarino@apple.com
CC: bfulgham@webkit.org, simon.fraser@apple.com,
webkit-bug-importer@group.apple.com, zalan@apple.com
m_inlineContent could become null (such as after calling \
LineLayout::clearInlineContent(), so we add these two checks to protect against an \
nullptr deref.
<rdar://problem/88265059>
--
You are receiving this mail because:
You are the assignee for the bug.
--1643661680.D1Afae1e8.21658
Date: Mon, 31 Jan 2022 12:41:20 -0800
MIME-Version: 1.0
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugs.webkit.org/
Auto-Submitted: auto-generated
<html>
<head>
<base href="https://bugs.webkit.org/">
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW - null ptr deref in LayoutIntegrationLineLayout \
LineLayout::adjustForPagination and LineLayout::visualOverflowBoundingBoxRectFor" \
href="https://bugs.webkit.org/show_bug.cgi?id=235907">235907</a> </td>
</tr>
<tr>
<th>Summary</th>
<td>null ptr deref in LayoutIntegrationLineLayout \
LineLayout::adjustForPagination and LineLayout::visualOverflowBoundingBoxRectFor \
</td> </tr>
<tr>
<th>Product</th>
<td>WebKit
</td>
</tr>
<tr>
<th>Version</th>
<td>WebKit Nightly Build
</td>
</tr>
<tr>
<th>Hardware</th>
<td>Unspecified
</td>
</tr>
<tr>
<th>OS</th>
<td>Unspecified
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Keywords</th>
<td>InRadar
</td>
</tr>
<tr>
<th>Severity</th>
<td>Normal
</td>
</tr>
<tr>
<th>Priority</th>
<td>P2
</td>
</tr>
<tr>
<th>Component</th>
<td>Layout and Rendering
</td>
</tr>
<tr>
<th>Assignee</th>
<td>webkit-unassigned@lists.webkit.org
</td>
</tr>
<tr>
<th>Reporter</th>
<td>gnavamarino@apple.com
</td>
</tr>
<tr>
<th>CC</th>
<td>bfulgham@webkit.org, simon.fraser@apple.com, \
webkit-bug-importer@group.apple.com, zalan@apple.com </td>
</tr></table>
<p>
<div>
<pre>m_inlineContent could become null (such as after calling \
LineLayout::clearInlineContent(), so we add these two checks to protect against an \
nullptr deref.
<<a href="rdar://problem/88265059">rdar://problem/88265059</a>></pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>
--1643661680.D1Afae1e8.21658--
_______________________________________________
webkit-unassigned mailing list
webkit-unassigned@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-unassigned
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic