[Webkit-unassigned] [Bug 205132] Null Ptr Deref @ WTF::TypeCastTraits<WebCore::HTMLTextFormControlElement const, WebCore::Element const, false>::isType

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Dec 11 14:38:19 PST 2019


https://bugs.webkit.org/show_bug.cgi?id=205132

--- Comment #5 from Ryosuke Niwa <rniwa at webkit.org> ---
Comment on attachment 385430
  --> https://bugs.webkit.org/attachment.cgi?id=385430
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=385430&action=review

> Source/WebCore/ChangeLog:8
> +        No new tests (Test case is timing sensitive. Please see comments on this bug.)

Can we try adding GCController.collect everywhere and see if that helps with making the test more reproducible?

> Source/WebCore/html/shadow/TextControlInnerElements.cpp:176
> +    if (shadowHost() && shadowHostStyle) {

This isn't right. We shouldn't have nullptr for shadowHostStyle here. We need to figure out how we're getting there.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20191211/e67bd156/attachment.htm>


More information about the webkit-unassigned mailing list