[Webkit-unassigned] [Bug 178189] New: Correct nullptr deref in selection handling
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Wed Oct 11 15:39:06 PDT 2017
https://bugs.webkit.org/show_bug.cgi?id=178189
Bug ID: 178189
Summary: Correct nullptr deref in selection handling
Product: WebKit
Version: WebKit Nightly Build
Hardware: Unspecified
OS: Unspecified
Status: NEW
Severity: Normal
Priority: P2
Component: HTML Editing
Assignee: webkit-unassigned at lists.webkit.org
Reporter: bfulgham at webkit.org
CC: wenson_hsieh at apple.com
The 'Selection::toNormalizedRange()' returns nullptr for various conditions, specifically for a 'None' selection, but also for an "Orphaned" range.
We should make sure we check that 'toNormalizedRange' returns a non-null pointer before using it.
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20171011/5c3b4862/attachment-0001.html>
More information about the webkit-unassigned
mailing list