[Webkit-unassigned] [Bug 206109] Nullptr deref in WebCore::RenderTreeBuilder::Block::attachIgnoringContinuation when an element is inserted before LEGEND

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=206109

Jack <shihchieh_lee at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|Nullptr crash in            |Nullptr deref in
                   |WebCore::RenderTreeBuilder: |WebCore::RenderTreeBuilder:
                   |:Block::attachIgnoringConti |:Block::attachIgnoringConti
                   |nuation when child and      |nuation when an element is
                   |beforeChild have different  |inserted before LEGEND
                   |parents                     |

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200124/816c2540/attachment.htm>