Crash in RadioButtonGroups::requiredStateChanged
authorrniwa@webkit.org <rniwa@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Thu, 26 Mar 2020 21:25:21 +0000 (21:25 +0000)
committerrniwa@webkit.org <rniwa@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Thu, 26 Mar 2020 21:25:21 +0000 (21:25 +0000)
commit749dff6d2ac32ddec4615c7f8a2695cd428373f5
treed8597e51fb6d36b83a3d47fed9bb5d735e0cb16e
parent29be6fd6eb795b94fe99fb48a70dd1aa7cf8d81c
Crash in RadioButtonGroups::requiredStateChanged
https://bugs.webkit.org/show_bug.cgi?id=209585

Reviewed by Zalan Bujtas.

Source/WebCore:

Like r254722, radio group could be null in RadioButtonGroups::requiredStateChanged. Added a null check.

Test: fast/forms/update-required-state-on-radio-before-finalizing-tree-insertion-crash.html

* dom/RadioButtonGroups.cpp:
(WebCore::RadioButtonGroups::requiredStateChanged):

LayoutTests:

Added a regression test.

* fast/forms/update-required-state-on-radio-before-finalizing-tree-insertion-crash-expected.txt: Added.
* fast/forms/update-required-state-on-radio-before-finalizing-tree-insertion-crash.html: Added.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@259079 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog
LayoutTests/fast/forms/update-required-state-on-radio-before-finalizing-tree-insertion-crash-expected.txt [new file with mode: 0644]
LayoutTests/fast/forms/update-required-state-on-radio-before-finalizing-tree-insertion-crash.html [new file with mode: 0644]
Source/WebCore/ChangeLog
Source/WebCore/dom/RadioButtonGroups.cpp