[Webkit-unassigned] [Bug 222720] REGRESSION(r272900): Nullptr crash in ComposedTreeIterator::traverseNextInShadowTree() via ShadowRoot::hostChildElementDidChange

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=222720

--- Comment #19 from Carlos Garcia Campos <cgarcia at igalia.com> ---
So, a possible fix would be to add the new nodes found wile iterating the children for removal to the collected children vector. That would keep them alive, but I'm not sure it's right to return them in the children vector or not. If not, we could just keep a separate vector for nodes added while other were removed.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210315/3e940f17/attachment.htm>