Bug 289963

Summary:	WebProcess crash from CheckedPtr assertion under styleForContainer
Product:	WebKit	Reporter:	Simon Pena <spena>
Component:	CSS	Assignee:	Simon Pena <spena>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	koivisto, webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified

Simon Pena

Reported 2025-03-18 08:19:47 PDT

ContainerQueryEvaluator's styleForContainer checks that evaluationState is valid before checking the elementStyle of a container, but under a certain shadow DOM scenario, evaluationState->styleUpdate is null.

Attachments
Add attachment proposed patch, testcase, etc.

Simon Pena

Comment 1 2025-03-18 08:37:25 PDT

Pull request: https://github.com/WebKit/WebKit/pull/42622

Radar WebKit Bug Importer

Comment 2 2025-03-25 08:20:13 PDT

<rdar://problem/147841396>

EWS

Comment 3 2025-04-25 05:27:42 PDT

Committed 294104@main (f34f7f5c4f50): <https://commits.webkit.org/294104@main> Reviewed commits have been landed. Closing PR #42622 and removing active labels.

Note You need to log in before you can comment on or make changes to this bug.