Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: dcc214eccd588761bcaeee06f9d525bfb64c2f88
      
https://github.com/WebKit/WebKit/commit/dcc214eccd588761bcaeee06f9d525bfb64c2f88
  Author: Ahmad Saleem <[email protected]>
  Date:   2022-11-12 (Sat, 12 Nov 2022)

  Changed paths:
    A LayoutTests/fast/table/tr-min-content-crash-expected.txt
    A LayoutTests/fast/table/tr-min-content-crash.html
    M Source/WebCore/rendering/RenderTableSection.cpp

  Log Message:
  -----------
  Check if length isSpecified before accessing in RenderTableSection.cpp for 
minimumValueForLength

Check if length isSpecified before accessing in RenderTableSection.cpp for 
minimumValueForLength
https://bugs.webkit.org/show_bug.cgi?id=247840

Reviewed by Alan Baradlay.

Merge - 
https://chromium.googlesource.com/chromium/blink/+/33a620c7df6ac7ef4b7b4cbc94be07f70ae2e5f7

When calculating the minimumValueForLength, Webkit has to make sure
that the provided value is specified before using.

* Source/WebCore/rendering/RenderTableSection.cpp:
(RenderTableSection::calcRowLogicalHeight): Update logic of 
minimumValueForLength to ensure that the value is specified before use.
* LayoutTests/fast/table/tr-min-content-crash.html: Added Test Case
* LayoutTests/fast/table/tr-min-content-crash-expected.txt: Added Test Case 
Expectations

Canonical link: https://commits.webkit.org/256614@main


_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to