Closed
Bug 1866246
Opened 7 months ago
Closed 7 months ago
Crash with complex sign() in length-valued properties
Categories
(Core :: CSS Parsing and Computation, defect)
Core
CSS Parsing and Computation
Tracking
()
RESOLVED
FIXED
122 Branch
| Tracking | Status | |
|---|---|---|
| firefox122 | --- | fixed |
People
(Reporter: emilio, Assigned: emilio)
References
Details
Attachments
(1 file)
No description provided.
|
Assignee | |
Comment 1•7 months ago
|
||
Make sure we don't parse units whose sign is not resolvable without a
basis (i.e. percentages when they're not allowed).
Also make sure that we type check the sum so that we don't parse bogus
operations.
Make the length resolution code not crash in release builds.
Pushed by ealvarez@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/4b4afdd073f8 Fix sign() type checking. r=tlouw,firefox-style-system-reviewers,jwatt
Created web-platform-tests PR https://github.com/web-platform-tests/wpt/pull/43335 for changes under testing/web-platform/tests
|
||
Comment 4•7 months ago
|
||
| bugherder | ||
Status: NEW → RESOLVED
Closed: 7 months ago
status-firefox122:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 122 Branch
Upstream PR merged by moz-wptsync-bot
You need to log in
before you can comment on or make changes to this bug.
Description
•