[webkit-changes] [WebKit/WebKit] 939e0c: Release assert in CSSPrimitiveValue::create due to...

[Antti Koivisto]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 939e0cd24c093c64d6a508b60617de29c4c007bc
      https://github.com/WebKit/WebKit/commit/939e0cd24c093c64d6a508b60617de29c4c007bc
  Author: Antti Koivisto <antti at apple.com>
  Date:   2023-10-12 (Thu, 12 Oct 2023)

  Changed paths:
    A LayoutTests/fast/css/transform-function-perspective-crash-expected.txt
    A LayoutTests/fast/css/transform-function-perspective-crash.html
    M Source/WebCore/css/TransformFunctions.cpp

  Log Message:
  -----------
  Release assert in CSSPrimitiveValue::create due to undefined perspective length value
https://bugs.webkit.org/show_bug.cgi?id=263005
rdar://114695740

Reviewed by Alan Baradlay.

* LayoutTests/fast/css/transform-function-perspective-crash-expected.txt: Added.
* LayoutTests/fast/css/transform-function-perspective-crash.html: Added.
* Source/WebCore/css/TransformFunctions.cpp:
(WebCore::transformForValue):
(WebCore::translateForValue):

Most paths check for Undefined but these ones didn't.

Canonical link: https://commits.webkit.org/269244@main