[Webkit-unassigned] [Bug 276754] New: Avoid crashing if traverseUnchangedSubtree can't find the same backingSharingProvider

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Jul 17 19:36:21 PDT 2024


https://bugs.webkit.org/show_bug.cgi?id=276754

            Bug ID: 276754
           Summary: Avoid crashing if traverseUnchangedSubtree can't find
                    the same backingSharingProvider
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Layout and Rendering
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: mattwoodrow at apple.com
                CC: bfulgham at webkit.org, simon.fraser at apple.com,
                    zalan at apple.com

This currently is a nullptr crash if backingProviderCandidateForLayer returns nullptr.

We should be able to see if the candidate used from the last update is still available, and use that to avoid the crash (but still render incorrectly).

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20240718/f58a78ff/attachment-0001.htm>


More information about the webkit-unassigned mailing list