[Webkit-unassigned] [Bug 242159] Crash under WebCore::Style::ElementRuleCollector::collectMatchingRules

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=242159

--- Comment #1 from Fujii Hironori <Hironori.Fujii at sony.com> ---
ElementRuleCollector::collectMatchingRules has the following code:

>    if (element.hasAttributesWithoutUpdate() && matchRequest.ruleSet.hasAttributeRules()) {
>        for (auto& attribute : element.attributesIterator())
>            collectMatchingRulesForList(matchRequest.ruleSet.attributeRules(attribute.localName(), isHTML), matchRequest);
>    }

`attribute` wasn't valid value.
This code was added by 251950 at main (bug#242058).

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220630/23c3e78a/attachment.htm>