Bug 156281 - ComposedTreeIterator may crash when first child of shadow root is a comment node
Summary: ComposedTreeIterator may crash when first child of shadow root is a comment node
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: DOM (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-04-06 01:56 PDT by Antti Koivisto
Modified: 2016-04-06 02:29 PDT (History)
4 users (show)

See Also:


Attachments
patch (9.80 KB, patch)
2016-04-06 02:00 PDT, Antti Koivisto
kling: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Antti Koivisto 2016-04-06 01:56:38 PDT
It should not use plain firstChild() and assume it is Element or Text.
Comment 1 Antti Koivisto 2016-04-06 02:00:24 PDT
Created attachment 275761 [details]
patch
Comment 2 Antti Koivisto 2016-04-06 02:29:49 PDT
http://trac.webkit.org/changeset/199097