'*' is not a valid attribute selector

third_party/WebKit/Source/core/css/parser/CSSSelectorParser.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "core/css/parser/CSSSelectorParser.h"
 
 #include "core/css/CSSSelectorList.h"
 #include "core/css/StyleSheetContents.h"
 #include "core/css/parser/CSSParserContext.h"
 #include "core/frame/Deprecation.h"
@@ skipping 357 matching lines @@
 std::unique_ptr<CSSParserSelector> CSSSelectorParser::consumeAttribute(
     CSSParserTokenRange& range) {
   ASSERT(range.peek().type() == LeftBracketToken);
   CSSParserTokenRange block = range.consumeBlock();
   block.consumeWhitespace();
 
   AtomicString namespacePrefix;
   AtomicString attributeName;
   if (!consumeName(block, attributeName, namespacePrefix))
     return nullptr;
+  if (attributeName == starAtom)
+    return nullptr;
   block.consumeWhitespace();
 
   if (m_context->isHTMLDocument())
     attributeName = attributeName.lower();
 
   AtomicString namespaceURI = determineNamespace(namespacePrefix);
   if (namespaceURI.isNull())
     return nullptr;
 
   QualifiedName qualifiedName =
@@ skipping 519 matching lines @@
       }
       if (current->relation() == CSSSelector::IndirectAdjacent)
         m_context->useCounter()->count(UseCounter::CSSSelectorIndirectAdjacent);
       if (current->selectorList())
         recordUsageAndDeprecations(*current->selectorList());
     }
   }
 }
 
 }  // namespace blink