[Webkit-unassigned] [Bug 232512] Avoid corrupting the hashmap and subsequent nullptr deref by checking that the LayoutUnit is not a deleted value.
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Wed Nov 3 17:33:04 PDT 2021
https://bugs.webkit.org/show_bug.cgi?id=232512
John Cunningham <johncunningham at apple.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Summary|Fix a null ptr deref by |Avoid corrupting the
|checking that newOffset is |hashmap and subsequent
|a valid key before adding |nullptr deref by checking
|to the HashMap. |that the LayoutUnit is not
| |a deleted value.
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20211104/8fac1904/attachment.htm>
More information about the webkit-unassigned
mailing list