Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 59ecda13ecdbda262ba243715f95756bd4936eae
https://github.com/WebKit/WebKit/commit/59ecda13ecdbda262ba243715f95756bd4936eae
Author: Scott Marcy <msc...@apple.com>
Date: 2023-12-16 (Sat, 16 Dec 2023)
Changed paths:
A LayoutTests/fast/css/font-size-adjust-invalid-value-type-expected.txt
A LayoutTests/fast/css/font-size-adjust-invalid-value-type.html
M Source/WebCore/style/StyleBuilderConverter.h
Log Message:
-----------
rdar://115842409 (jsc_fuz/wktr: ASSERTION FAILED: is<Target>(source)
&WTF::downcast(Source &) [Target = WebCore::CSSValuePair, Source = const
WebCore::CSSValue] at StyleBuilderConverter.h:1632)
Checked for an unexpected CSS type for 'font-size-adjust' and returns a default
value instead of crashing.
Reviewed by anttijk.
This prevents a crash on downcasting when an unexpected `CSSValue` subclass is
provided.
Combined changes:
* LayoutTests/fast/css/font-size-adjust-invalid-value-type-expected.txt: Added.
* LayoutTests/fast/css/font-size-adjust-invalid-value-type.html: Added.
* Source/WebCore/style/StyleBuilderConverter.h:
(WebCore::Style::BuilderConverter::convertFontSizeAdjust):
Originally-landed-as: 267815.526@safari-7617-branch (92043c608a1c).
rdar://119598353
Canonical link: https://commits.webkit.org/272171@main
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes
