Bug 188935 - Check for null renderer in canBeScrolledIntoView
Summary: Check for null renderer in canBeScrolledIntoView
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebCore Misc. (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Don Olmstead
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2018-08-24 15:46 PDT by Don Olmstead
Modified: 2018-08-28 22:06 PDT (History)
6 users (show)

See Also:


Attachments
Patch (3.23 KB, patch)
2018-08-28 17:09 PDT, Don Olmstead
simon.fraser: review+
Details | Formatted Diff | Diff
Patch (3.22 KB, patch)
2018-08-28 18:15 PDT, Don Olmstead
no flags Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Don Olmstead 2018-08-24 15:46:06 PDT
There's no check on parentNode->renderer() before its used within canBeScrolledIntoView.

Associated Chromium fix with layout test https://chromium-review.googlesource.com/c/chromium/src/+/550255
Comment 1 Don Olmstead 2018-08-24 15:47:50 PDT
Adding the following in the for loop fixes the problem.

+        if (UNLIKELY(!parentNode->renderer()))
+            continue;

Its EOD here so if nobody gets to this by Monday I'll just throw together a patch with the layout test in it.
Comment 2 Don Olmstead 2018-08-28 17:09:42 PDT
Created attachment 348361 [details]
Patch

Port of the chromium fix
Comment 3 Simon Fraser (smfr) 2018-08-28 17:29:10 PDT
Comment on attachment 348361 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=348361&action=review

> Source/WebCore/page/SpatialNavigation.cpp:708
> +        if (UNLIKELY(!parentNode->renderer()))

The UNLIKELY() seems unnecessary.
Comment 4 Don Olmstead 2018-08-28 18:15:39 PDT
Created attachment 348371 [details]
Patch

Address review comments
Comment 5 WebKit Commit Bot 2018-08-28 22:05:32 PDT
Comment on attachment 348371 [details]
Patch

Clearing flags on attachment: 348371

Committed r235457: <https://trac.webkit.org/changeset/235457>
Comment 6 WebKit Commit Bot 2018-08-28 22:05:34 PDT
All reviewed patches have been landed.  Closing bug.
Comment 7 Radar WebKit Bug Importer 2018-08-28 22:06:14 PDT
<rdar://problem/43829010>