RESOLVED FIXED250981
Nullptr crash under CustomPropertyRegistry::registerFromStylesheet 
https://bugs.webkit.org/show_bug.cgi?id=250981
Summary Nullptr crash under CustomPropertyRegistry::registerFromStylesheet
Antti Koivisto
Reported 2023-01-22 08:25:48 PST
<style> @property --a { syntax: 'foo'; inherits: false; initial-value: foo; } </style> <script> onload = () => { document.open(); document.createElement('div').style.width = '0'; }; </script>
Attachments
Add attachment proposed patch, testcase, etc.
Antti Koivisto
Comment 1 2023-01-22 08:26:18 PST
rdar://104474736
Antti Koivisto
Comment 2 2023-01-22 08:39:09 PST
Pull request: https://github.com/WebKit/WebKit/pull/8954
EWS
Comment 3 2023-01-22 09:31:19 PST
Committed 259188@main (9b2b18b81262): <https://commits.webkit.org/259188@main> Reviewed commits have been landed. Closing PR #8954 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.