[Webkit-unassigned] [Bug 242159] Crash under WebCore::Style::ElementRuleCollector::collectMatchingRules

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Jun 29 19:28:50 PDT 2022


--- Comment #1 from Fujii Hironori <Hironori.Fujii at sony.com> ---
ElementRuleCollector::collectMatchingRules has the following code:

>    if (element.hasAttributesWithoutUpdate() && matchRequest.ruleSet.hasAttributeRules()) {
>        for (auto& attribute : element.attributesIterator())
>            collectMatchingRulesForList(matchRequest.ruleSet.attributeRules(attribute.localName(), isHTML), matchRequest);
>    }

`attribute` wasn't valid value.
This code was added by 251950 at main (bug#242058).

You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220630/23c3e78a/attachment.htm>

More information about the webkit-unassigned mailing list