Bug 312304
| Summary: | Popover test cases trigger nullptr dereference in WebKit | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Brent Fulgham <bfulgham> |
| Component: | New Bugs | Assignee: | Brent Fulgham <bfulgham> |
| Status: | RESOLVED FIXED | ||
| Severity: | Normal | CC: | webkit-bug-importer |
| Priority: | P2 | Keywords: | InRadar |
| Version: | WebKit Nightly Build | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Bug Depends on: | |||
| Bug Blocks: | 275048 | ||
Brent Fulgham
Three upstream WPT tests are causing crashes when run in WebKit:
imported/w3c/web-platform-tests/html/semantics/popovers/popover-events.html [ Crash ]
imported/w3c/web-platform-tests/html/semantics/popovers/popover-focus-blur-crash.html [ Crash ]
imported/w3c/web-platform-tests/html/semantics/popovers/popover-remove-attribute-during-focusing-steps.html [ Crash ]
These are nullptr dereferences:
```
Thread 0 Crashed:: Dispatch queue: com.apple.main-thread:
0 com.apple.WebCore 0x11ac19d58 WebCore::PopoverData::setPreviouslyFocusedElement(WebCore::Element*)
1 com.apple.WebCore 0x119be1e64 WebCore::HTMLElement::showPopoverInternal(WebCore::HTMLElement*)
2 com.apple.WebCore 0x118c45ad4 WebCore::jsHTMLElementPrototypeFunction_showPopover(JSC::JSGlobalObject*, JSC::CallFrame*)
3 0x13281003c
```
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Radar WebKit Bug Importer
<rdar://problem/174767317>
Brent Fulgham
Pull request: https://github.com/WebKit/WebKit/pull/62780
EWS
Committed 311343@main (5d9589eb2f70): <https://commits.webkit.org/311343@main>
Reviewed commits have been landed. Closing PR #62780 and removing active labels.