[Webkit-unassigned] [Bug 247840] New: Check if length isSpecified before accessing in RenderTableSection.cpp for minimumValueForLength

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=247840

            Bug ID: 247840
           Summary: Check if length isSpecified before accessing in
                    RenderTableSection.cpp for minimumValueForLength
           Product: WebKit
           Version: Safari Technology Preview
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Tables
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: ahmad.saleem792 at gmail.com
                CC: zalan at apple.com

Hi Team,

While going through Blink commits, I came across another potential crash issue in the DEBUG and assertion fix but we don't have this assertion bug but we still have the code, so I think it would be good to fix any potential crash, hence, I thought to create this bug.

Blink Commit - https://chromium.googlesource.com/chromium/blink/+/33a620c7df6ac7ef4b7b4cbc94be07f70ae2e5f7

Webkit GitHub Source - https://github.com/WebKit/WebKit/blob/2b519ff97e74aa11c104cfb2dcb3d697db8d2a49/Source/WebCore/rendering/RenderTableSection.cpp#L246

Just wanted to raise this bug to fix it so we can have more stability in Webkit.

Thanks!

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20221112/cfac6d09/attachment.htm>