RESOLVED FIXED313007
Inserting a text node before ::first-letter may crash on CheckedPtr 
https://bugs.webkit.org/show_bug.cgi?id=313007
Summary Inserting a text node before ::first-letter may crash on CheckedPtr
alan
Reported 2026-04-22 10:42:32 PDT
<rdar://175223463>
Attachments
Patch (10.29 KB, patch)
2026-04-22 10:47 PDT, alan 		no flags
DetailsFormatted DiffDiff
Patch (10.41 KB, patch)
2026-04-22 12:32 PDT, alan 		no flags
DetailsFormatted DiffDiff
Patch (10.36 KB, patch)
2026-04-23 05:40 PDT, alan 		ews-feeder: commit-queue-
DetailsFormatted DiffDiff
[fast-cq]Patch (10.37 KB, patch)
2026-04-23 07:06 PDT, alan 		no flags
DetailsFormatted DiffDiff
Show Obsolete (3) View All Add attachment proposed patch, testcase, etc.
alan
Comment 1 2026-04-22 10:47:54 PDT
Created attachment 479245 [details] Patch
Antti Koivisto
Comment 2 2026-04-22 10:58:56 PDT
Comment on attachment 479245 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=479245&action=review > Source/WebCore/page/LocalFrameViewLayoutContext.h:161 > + bool immediateRendererDestructionEnabled() const { return m_immediateRendererDestructionEnabled; } > + void setImmediateRendererDestructionEnabled(bool enabled) { m_immediateRendererDestructionEnabled = enabled; } How about immediateRendererDestructionEnabledForTesting (here and elsewhere)? We use the pattern in other places.
alan
Comment 3 2026-04-22 12:32:54 PDT
Created attachment 479246 [details] Patch
alan
Comment 4 2026-04-23 05:40:38 PDT
Created attachment 479264 [details] Patch
alan
Comment 5 2026-04-23 07:06:44 PDT
Created attachment 479268 [details] [fast-cq]Patch
EWS
Comment 6 2026-04-23 09:54:48 PDT
Committed 311864@main (d8bf29799f0f): <https://commits.webkit.org/311864@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 479268 [details].
Note You need to log in before you can comment on or make changes to this bug.