[Webkit-unassigned] [Bug 250984] New: Nullptr crash accessing font under CSSPropertyParser::parseTypedCustomPropertyValue

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sun Jan 22 10:00:00 PST 2023


https://bugs.webkit.org/show_bug.cgi?id=250984

            Bug ID: 250984
           Summary: Nullptr crash accessing font under
                    CSSPropertyParser::parseTypedCustomPropertyValue
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: CSS
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: koivisto at iki.fi

<html lang="en">
<style>
  html {
    letter-spacing: var(--a);
    --a: 0ic;
  }
</style>
<script>
  onload = () => {
    CSS.registerProperty({
      inherits: true,
      name: '--a',
      syntax: '<length>',
      initialValue: '0',
    });
  };
</script>
</html>

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20230122/b3dbe64b/attachment.htm>


More information about the webkit-unassigned mailing list