[Webkit-unassigned] [Bug 82910] New: REGRESSION (98963 and 109091): Crash when creating a WebArchive of a page with @page style rules

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=82910

           Summary: REGRESSION (98963 and 109091):  Crash when creating a
                    WebArchive of a page with @page style rules
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Keywords: InRadar
          Severity: Normal
          Priority: P2
         Component: CSS
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: beidson at apple.com


REGRESSION (98963 and 109091):  Crash when creating a WebArchive of a page with @page style rules

>  1 com.apple.WebCore              0x7fff8efa3a47 WebCore::StylePropertySet::addSubresourceStyleURLs(WTF::ListHashSet<WebCore::KURL, 256ul, WebCore::KURLHash>&, WebCore::CSSStyleSheet*) + 0x17
   2 com.apple.WebCore              0x7fff8ea2291b WebCore::CSSStyleSheet::addSubresourceStyleURLs(WTF::ListHashSet<WebCore::KURL, 256ul, WebCore::KURLHash>&) + 0xfb
   3 com.apple.WebCore              0x7fff8ea2280e WebCore::HTMLLinkElement::addSubresourceAttributeURLs(WTF::ListHashSet<WebCore::KURL, 256ul, WebCore::KURLHash>&) const + 0xee
   4 com.apple.WebCore              0x7fff8eea0fdd WebCore::LegacyWebArchive::create(WTF::String const&, WebCore::Frame*, WTF::Vector<WebCore::Node*, 0ul> const&, WebCore::FrameFilter*) + 0x50d
   5 com.apple.WebCore              0x7fff8eea0a69 WebCore::LegacyWebArchive::create(WebCore::Node*, WebCore::FrameFilter*) + 0x219
   6 com.apple.WebKit2              0x7fff8cfd50fb WebKit::WebFrame::webArchiveData(bool (*)(OpaqueWKBundleFrame const*, OpaqueWKBundleFrame const*, void*), void*) + 0x3d

The cause is code in CSSStyleSheet::addSubresourceStyleURLs that does:
if (rule->isStyleRule() || rule->isPageRule())
    static_cast<CSSStyleRule*>(rule)->styleRule()->addSubresourceStyleURLs(urls, this);

Page rules are casted to CSSStyleRule* which is bogus.

Patch coming soon.

In radar as <rdar://problem/11020155>

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.