[webkit-changes] [WebKit/WebKit] c36c90: jsc_fuz/wktr: RELEASE_ASSERT(to <= inlineTextItem....

[nishajain61]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: c36c902179515a61aa57a9c0fe9db65521f8ee30
      https://github.com/WebKit/WebKit/commit/c36c902179515a61aa57a9c0fe9db65521f8ee30
  Author: Nisha Jain <nisha_jain at apple.com>
  Date:   2023-10-12 (Thu, 12 Oct 2023)

  Changed paths:
    A LayoutTests/fast/text/crash-grapheme-cluster-spanning-adjacent-textitems-expected.txt
    A LayoutTests/fast/text/crash-grapheme-cluster-spanning-adjacent-textitems.html
    M Source/WebCore/layout/formattingContexts/inline/IntrinsicWidthHandler.cpp

  Log Message:
  -----------
  jsc_fuz/wktr: RELEASE_ASSERT(to <= inlineTextItem.end()); in WebCore::Layout::TextUtil::width(...) (TextUtil.cpp:96).
https://bugs.webkit.org/show_bug.cgi?id=262799
rdar://115842183.

Reviewed by Alan Baradlay.

Modified IntrinsicWidthHandler::simplifiedMinimumWidth() API to calculate width for grapheme-clusters spanning adjacent inline textitems.

Test : fast/text/crash-grapheme-cluster-spanning-adjacent-textitems.html.

* Source/WebCore/layout/formattingContexts/inline/IntrinsicWidthHandler.cpp : Changing API to consider grapheme-clusters spanning adjacent inline textitems.
* LayoutTests/fast/text/crash-grapheme-cluster-spanning-adjacent-textitems.html : Added test case.
* LayoutTests/fast/text/crash-grapheme-cluster-spanning-adjacent-textitems-expected.html : Added test expected file.

Canonical link: https://commits.webkit.org/269276@main