[Webkit-unassigned] [Bug 249994] New: [css-nesting] Fix assert when parsing invalid CSS selector

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=249994

            Bug ID: 249994
           Summary: [css-nesting] Fix assert when parsing invalid CSS
                    selector
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit Misc.
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: m_dubet at apple.com

Debug builds are reporting an assertion failure after this change.

https://results.webkit.org/?suite=layout-tests&test=fast%2Fcss%2Ffont_property_normal.html

Buildbot: builder Apple-Ventura-Debug-AppleSilicon-WK2-Tests build 569
https://build.webkit.org/#/builders/704/builds/569

fast/css/font_property_normal.html [ Crash ]
fast/css/parsing-invalid-block-recovery.html [ Crash ]

ASSERTION FAILED: scopeCombinator != CSSSelector::Subselector
css/parser/CSSSelectorParser.cpp(329) : std::unique_ptr<CSSParserSelector> WebCore::CSSSelectorParser::consumeRelativeNestedSelector(WebCore::CSSParserTokenRange &)

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20230102/bd80b17d/attachment-0001.htm>