[Webkit-unassigned] [Bug 206109] Nullptr deref in WebCore::RenderTreeBuilder::Block::attachIgnoringContinuation when an element is inserted before LEGEND

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Jan 23 17:41:33 PST 2020


Jack <shihchieh_lee at apple.com> changed:

           What    |Removed                     |Added
            Summary|Nullptr crash in            |Nullptr deref in
                   |WebCore::RenderTreeBuilder: |WebCore::RenderTreeBuilder:
                   |:Block::attachIgnoringConti |:Block::attachIgnoringConti
                   |nuation when child and      |nuation when an element is
                   |beforeChild have different  |inserted before LEGEND
                   |parents                     |

You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200124/816c2540/attachment.htm>

More information about the webkit-unassigned mailing list