[webkit-changes] [WebKit/WebKit] dcc214: Check if length isSpecified before accessing in Re...
Ahmad Saleem
noreply at github.com
Sat Nov 12 16:23:02 PST 2022
Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: dcc214eccd588761bcaeee06f9d525bfb64c2f88
https://github.com/WebKit/WebKit/commit/dcc214eccd588761bcaeee06f9d525bfb64c2f88
Author: Ahmad Saleem <ahmad.saleem792+github at gmail.com>
Date: 2022-11-12 (Sat, 12 Nov 2022)
Changed paths:
A LayoutTests/fast/table/tr-min-content-crash-expected.txt
A LayoutTests/fast/table/tr-min-content-crash.html
M Source/WebCore/rendering/RenderTableSection.cpp
Log Message:
-----------
Check if length isSpecified before accessing in RenderTableSection.cpp for minimumValueForLength
Check if length isSpecified before accessing in RenderTableSection.cpp for minimumValueForLength
https://bugs.webkit.org/show_bug.cgi?id=247840
Reviewed by Alan Baradlay.
Merge - https://chromium.googlesource.com/chromium/blink/+/33a620c7df6ac7ef4b7b4cbc94be07f70ae2e5f7
When calculating the minimumValueForLength, Webkit has to make sure
that the provided value is specified before using.
* Source/WebCore/rendering/RenderTableSection.cpp:
(RenderTableSection::calcRowLogicalHeight): Update logic of minimumValueForLength to ensure that the value is specified before use.
* LayoutTests/fast/table/tr-min-content-crash.html: Added Test Case
* LayoutTests/fast/table/tr-min-content-crash-expected.txt: Added Test Case Expectations
Canonical link: https://commits.webkit.org/256614@main
More information about the webkit-changes
mailing list