[Webkit-unassigned] [Bug 240795] New: REGRESSION (r294291): Another nullptr crash with ::first-letter

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=240795

            Bug ID: 240795
           Summary: REGRESSION (r294291): Another nullptr crash with
                    ::first-letter
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Layout and Rendering
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: koivisto at iki.fi
                CC: bfulgham at webkit.org, simon.fraser at apple.com,
                    zalan at apple.com

<style>
  html::first-letter {
    width: 0;
  }
</style>
<script>
  onload = () => {
    document.execCommand('SelectAll');
    document.body.append('aa');
    document.documentElement.append('');
    document.body.offsetTop;
    document.body.style.overflow = 'clip';
  };
</script>

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220523/760c543d/attachment-0001.htm>