[webkit-changes] [WebKit/WebKit] dcc214: Check if length isSpecified before accessing in Re...

Ahmad Saleem noreply at github.com
Sat Nov 12 16:23:02 PST 2022


  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: dcc214eccd588761bcaeee06f9d525bfb64c2f88
      https://github.com/WebKit/WebKit/commit/dcc214eccd588761bcaeee06f9d525bfb64c2f88
  Author: Ahmad Saleem <ahmad.saleem792+github at gmail.com>
  Date:   2022-11-12 (Sat, 12 Nov 2022)

  Changed paths:
    A LayoutTests/fast/table/tr-min-content-crash-expected.txt
    A LayoutTests/fast/table/tr-min-content-crash.html
    M Source/WebCore/rendering/RenderTableSection.cpp

  Log Message:
  -----------
  Check if length isSpecified before accessing in RenderTableSection.cpp for minimumValueForLength

Check if length isSpecified before accessing in RenderTableSection.cpp for minimumValueForLength
https://bugs.webkit.org/show_bug.cgi?id=247840

Reviewed by Alan Baradlay.

Merge - https://chromium.googlesource.com/chromium/blink/+/33a620c7df6ac7ef4b7b4cbc94be07f70ae2e5f7

When calculating the minimumValueForLength, Webkit has to make sure
that the provided value is specified before using.

* Source/WebCore/rendering/RenderTableSection.cpp:
(RenderTableSection::calcRowLogicalHeight): Update logic of minimumValueForLength to ensure that the value is specified before use.
* LayoutTests/fast/table/tr-min-content-crash.html: Added Test Case
* LayoutTests/fast/table/tr-min-content-crash-expected.txt: Added Test Case Expectations

Canonical link: https://commits.webkit.org/256614@main




More information about the webkit-changes mailing list