[Webkit-unassigned] [Bug 272296] nullderef in FloatingObjects::moveAllToFloatInfoMap

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=272296

--- Comment #3 from Michael Catanzaro <mcatanzaro at redhat.com> ---
I can reproduce by simply clicking on attachment #470799. I doubt it's platform-specific. The problem seems to be that FloatingObject::renderer will crash if m_renderer is nullptr, and m_renderer is a weak pointer so it's expected to be possibly nullptr. Ideally somebody familiar with rendering would look closer.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20240722/57068ed1/attachment.htm>