[Webkit-unassigned] [Bug 226398] Crash in HTMLConverter::_addLinkForElement()

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sat May 29 11:28:13 PDT 2021


https://bugs.webkit.org/show_bug.cgi?id=226398

--- Comment #2 from Ryosuke Niwa <rniwa at webkit.org> ---
Comment on attachment 430058
  --> https://bugs.webkit.org/attachment.cgi?id=430058
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=430058&action=review

> Source/WebCore/editing/cocoa/HTMLConverter.mm:2219
> -                _exitElement(element, depth, startIndex);
> +                if (startIndex <= [_attrStr length])

It seems that we don't even want to call _processElement when this condition isn't met?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210529/48450901/attachment.htm>


More information about the webkit-unassigned mailing list