RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-07-25 21:17:44 +00:00
Code Issues Activity Actions

LibWeb: Fix null pointer dereference in DOM::Node::remove()

Browse source 
Instead of blindly dereferencing m_registered_observer_list, just use
the add_registered_observer() helper.

Fixes #22005
This commit is contained in:
Andreas Kling 2023-11-20 20:03:43 +01:00
parent 7320fdc1f5
commit cc9de38ea4
3 changed files with 15 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

13
Tests/LibWeb/Text/input/MutationObserver/removing-a-node.html Normal file
View file

@ -0,0 +1,13 @@
<body>
<script src="../include.js"></script>
<script>
test(() => {
let observer = new MutationObserver(function() {});
observer.observe(document.body, { attributes: true, childList: true, subtree: true });
let div = document.createElement("div");
document.body.appendChild(div);
div.remove();
println("PASS! (Didn't crash)");
});
</script>