[Webkit-unassigned] [Bug 206106] Null Ptr Deref READ @ WebCore::RenderMultiColumnFlow::lastMultiColumnSet const

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Jan 24 11:12:21 PST 2020


https://bugs.webkit.org/show_bug.cgi?id=206106

--- Comment #4 from Jack <shihchieh_lee at apple.com> ---
After discussing with Geoff, Alan and Antti, it was determined that the best approach is to check null multicolumn container (parent) and just exit the column processing functions.

Doing so help expedite destroy process. If later other functions also try to refer container in destroy process, we should exit the function immediately.

Ideally we should avoid moving children altogether, but that will require some refactoring, so we put null check for now.

(In reply to Jack from comment #3)
> After discussing with Geoff

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200124/43c57a1c/attachment.htm>


More information about the webkit-unassigned mailing list