Bug 250984

Summary: Nullptr crash accessing font under CSSPropertyParser::parseTypedCustomPropertyValue
Product: WebKit Reporter: Antti Koivisto <koivisto>
Component: CSSAssignee: Antti Koivisto <koivisto>
Status: RESOLVED FIXED    
Severity: Normal CC: webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

Description Antti Koivisto 2023-01-22 10:00:00 PST
<html lang="en">
<style>
  html {
    letter-spacing: var(--a);
    --a: 0ic;
  }
</style>
<script>
  onload = () => {
    CSS.registerProperty({
      inherits: true,
      name: '--a',
      syntax: '<length>',
      initialValue: '0',
    });
  };
</script>
</html>
Comment 1 Antti Koivisto 2023-01-22 10:00:13 PST
104474407
Comment 2 Antti Koivisto 2023-01-22 10:00:25 PST
rdar://104474407
Comment 3 Antti Koivisto 2023-01-22 10:40:11 PST
Pull request: https://github.com/WebKit/WebKit/pull/8955
Comment 4 EWS 2023-01-22 12:58:00 PST
Committed 259195@main (3ce91b574a86): <https://commits.webkit.org/259195@main>

Reviewed commits have been landed. Closing PR #8955 and removing active labels.