Bug 287031
| Summary: | [Grid] Crash in gridAreaPositionForOutOfFlowGridItem when accessing out of flow item map | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Sammy Gill <sgill26> |
| Component: | Layout and Rendering | Assignee: | Sammy Gill <sgill26> |
| Status: | RESOLVED FIXED | ||
| Severity: | Normal | CC: | bfulgham, simon.fraser, webkit-bug-importer, wilander, zalan |
| Priority: | P2 | Keywords: | InRadar |
| Version: | WebKit Nightly Build | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
Sammy Gill
In gridAreaPositionForOutOfFlowGridItem we unconditionally check for the renderer even though there is a possibility we may not have actually inserted it into the map In gridAreaBreadthForOutOfFlowGridItem. This can leads to a RELEASE_ASSERT from WeakRef
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Sammy Gill
rdar://143376323
Sammy Gill
Pull request: https://github.com/WebKit/WebKit/pull/39998
EWS
Committed 289863@main (baa760883a1e): <https://commits.webkit.org/289863@main>
Reviewed commits have been landed. Closing PR #39998 and removing active labels.
EWS
Committed 289651.55@safari-7621-branch (8252567f1fbb): <https://commits.webkit.org/289651.55@safari-7621-branch>
Reviewed commits have been landed. Closing PR #2524 and removing active labels.
Ryosuke Niwa
*** Bug 287483 has been marked as a duplicate of this bug. ***
Ryosuke Niwa
*** Bug 287482 has been marked as a duplicate of this bug. ***