描述
WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks.
AI分析AI驱动
受影响产品
googleblink
参考资料
- http://trac.webkit.org/changeset/81648Mailing ListPatchVendor Advisory
- http://trac.webkit.org/changeset/81748Mailing ListPatchVendor Advisory
- https://bugs.chromium.org/p/chromium/issues/detail?id=76784ExploitMailing ListVendor Advisory
- http://trac.webkit.org/changeset/81648Mailing ListPatchVendor Advisory
- http://trac.webkit.org/changeset/81748Mailing ListPatchVendor Advisory
- https://bugs.chromium.org/p/chromium/issues/detail?id=76784ExploitMailing ListVendor Advisory