`5e2525e60a` REGRESSION (312086@main): Crash in WebCore::PositionedLayoutConstraints::PositionedLayoutConstraints; WebCore::RenderBox::containingBlockLogicalWidthForContent

severity low class LogicError confidence 0.45 WebCore rendering/layout

Alan Baradlay Tue May 19 05:08:35 2026 -0700 full: 5e2525e60a915134b0d622336c82a65137027528 bug report ↗ view on GitHub ↗

Primitive: null parent() deref in positioned layout
Triage note: Web-reachable layout null-deref crash fix.

Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.

Before / after

Loading diff…