← WebKit Silent-Fix Report — 2026-W21
e9a9f1b34e [GFC][Crash] Grid items with auto height triggering a crash in blockContentSizeSuggestion()
severity low
class LogicError
confidence 0.40
WebCore layout/grid
Primitive: null/again-crash in grid block-size suggestion
Triage note: Web-reachable layout crash fix (crash test), though likely a controlled null-deref.
Triage note: Web-reachable layout crash fix (crash test), though likely a controlled null-deref.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…