Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: f81050aadfd1b78e0993fa1db5695f08a1511117
https://github.com/WebKit/WebKit/commit/f81050aadfd1b78e0993fa1db5695f08a1511117
Author: Nisha Jain <[email protected]>
Date: 2023-10-20 (Fri, 20 Oct 2023)
Changed paths:
A LayoutTests/svg/crash-svg-null-maskimage-expected.txt
A LayoutTests/svg/crash-svg-null-maskimage.html
M Source/WebCore/rendering/svg/SVGResources.cpp
Log Message:
-----------
jsc_fuz/wktr: null ptr deref in
WebCore::SVGResources::buildCachedResources(WebCore::RenderElement const&,
WebCore::RenderStyle const&) + 368 (SVGResources.cpp:251)
https://bugs.webkit.org/show_bug.cgi?id=263224
rdar://116386835.
Reviewed by Chris Dumez.
Modified SVGResources::buildCachedResources API in order to consider passed svg
with NULL mask-image.
Test : LayoutTests/svg/crash-svg-null-maskimage.html
* Source/WebCore/rendering/svg/SVGResources.cpp : Modified to check if the
maskImage variable is not NULL before dereferrencing.
* LayoutTests/svg/crash-svg-null-maskimage.html : Added test case.
* LayoutTests/svg/crash-svg-null-maskimage-expected.txt : Added test expected
file.
Canonical link: https://commits.webkit.org/269561@main
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
