Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 73f6c6d69991fded4847d7d8fdf9153859f3189d
https://github.com/WebKit/WebKit/commit/73f6c6d69991fded4847d7d8fdf9153859f3189d
Author: Tim Nguyen <[email protected]>
Date: 2023-08-31 (Thu, 31 Aug 2023)
Changed paths:
M
LayoutTests/imported/w3c/web-platform-tests/css/geometry/DOMMatrix-001-expected.txt
M
LayoutTests/imported/w3c/web-platform-tests/css/geometry/DOMMatrix-001.html
M Source/WebCore/css/CSSPrimitiveValueMappings.h
Log Message:
-----------
Do not allow container units in DOMMatrix() and DOMMatrixReadOnly()
https://bugs.webkit.org/show_bug.cgi?id=260988
rdar://114759860
Reviewed by Simon Fraser.
Prevent a nullptr deref by forbidding container unit usage in DOMMatrix().
*
LayoutTests/imported/w3c/web-platform-tests/css/geometry/DOMMatrix-001-expected.txt:
* LayoutTests/imported/w3c/web-platform-tests/css/geometry/DOMMatrix-001.html:
* Source/WebCore/css/CSSPrimitiveValueMappings.h:
(WebCore::CSSPrimitiveValue::convertingToLengthHasRequiredConversionData const):
Canonical link: https://commits.webkit.org/267529@main
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
