Bug 212036 - Null Ptr Deref @ WebCore::CSSValue::classType
Summary: Null Ptr Deref @ WebCore::CSSValue::classType
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: CSS (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2020-05-18 11:45 PDT by Pinki Gyanchandani
Modified: 2020-05-18 13:49 PDT (History)
7 users (show)

See Also:

Attachments
Patch (3.74 KB, patch)
2020-05-18 12:17 PDT, Pinki Gyanchandani 		no flags Details | Formatted Diff | Diff
Patch (3.74 KB, patch)
2020-05-18 12:31 PDT, Pinki Gyanchandani 		no flags Details | Formatted Diff | Diff
Show Obsolete (1) View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Pinki Gyanchandani 2020-05-18 11:45:14 PDT 
Null Ptr Deref @ WebCore::CSSValue::classType
Comment 1 Pinki Gyanchandani 2020-05-18 11:59:45 PDT 
This issue is similar to https://bugs.webkit.org/show_bug.cgi?id=208316. In here m_value.calc() is NULL and but we are trying to access function cssText() without nullptr check.
Comment 2 Pinki Gyanchandani 2020-05-18 12:17:24 PDT 
Created attachment 399666 [details]
Patch
Comment 3 Pinki Gyanchandani 2020-05-18 12:31:01 PDT 
Created attachment 399667 [details]
Patch
Comment 4 Pinki Gyanchandani 2020-05-18 12:43:01 PDT 
rdar://problem/63200254
Comment 5 Geoffrey Garen 2020-05-18 13:26:13 PDT 
Comment on attachment 399667 [details]
Patch

r=me
Comment 6 EWS 2020-05-18 13:49:36 PDT 
Committed r261830: <https://trac.webkit.org/changeset/261830>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 399667 [details].