Branch: refs/heads/webkitglib/2.50
Home: https://github.com/WebKit/WebKit
Commit: fc66860e340726067ef9961fdef54fd711f1f709
https://github.com/WebKit/WebKit/commit/fc66860e340726067ef9961fdef54fd711f1f709
Author: Charlie Wolfe <[email protected]>
Date: 2026-01-15 (Thu, 15 Jan 2026)
Changed paths:
M Source/WebCore/page/PrintContext.cpp
Log Message:
-----------
Cherry-pick 305593@main (d3aa327426eb).
https://bugs.webkit.org/show_bug.cgi?id=305491
Crash in `computePageRectsWithPageSizeInternal`
https://bugs.webkit.org/show_bug.cgi?id=305491
rdar://78660161
Reviewed by Pascoe.
computePageRects only validated pageHeight, not pageWidth. When
resizePageRectsKeepingRatio returns zero
width (e.g., if no renderer), we may divide by zero in
computePageRectsWithPageSizeInternal, causing a
crash when the vector tries to allocate with the resulting size.
* Source/WebCore/page/PrintContext.cpp:
(WebCore::PrintContext::computePageRects):
Canonical link: https://commits.webkit.org/305593@main
Canonical link: https://commits.webkit.org/298234.384@webkitglib/2.50
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
