Branch: refs/heads/webkitglib/2.44
  Home:   https://github.com/WebKit/WebKit
  Commit: 7f5d64bf0202f98f55d6043db526f9dce586395c
      
https://github.com/WebKit/WebKit/commit/7f5d64bf0202f98f55d6043db526f9dce586395c
  Author: Antti Koivisto <[email protected]>
  Date:   2024-08-02 (Fri, 02 Aug 2024)

  Changed paths:
    A LayoutTests/fast/multicol/empty-line-assert-expected.txt
    A LayoutTests/fast/multicol/empty-line-assert.html
    M 
Source/WebCore/layout/formattingContexts/inline/invalidation/InlineInvalidation.cpp

  Log Message:
  -----------
  Cherry-pick 280118@main (ef29e9a60de2). 
https://bugs.webkit.org/show_bug.cgi?id=275605

    Assertion failure in adjustContentForPagination
    https://bugs.webkit.org/show_bug.cgi?id=275605
    rdar://124213853

    Reviewed by Alan Baradlay.

    * LayoutTests/fast/multicol/empty-line-assert-expected.txt: Added.
    * LayoutTests/fast/multicol/empty-line-assert.html: Added.
    * 
Source/WebCore/layout/formattingContexts/inline/invalidation/InlineInvalidation.cpp:
    (WebCore::Layout::leadingContentDisplayForLineIndex):

    The code assumed we can't have two subsequent root inline boxes in 
InlineDisplay. There
    are cases that generate empty lines where we get this structure.

    Canonical link: https://commits.webkit.org/280118@main

Canonical link: https://commits.webkit.org/274313.359@webkitglib/2.44


  Commit: b54df6d1c905689a1709652f709c99c135d4a8af
      
https://github.com/WebKit/WebKit/commit/b54df6d1c905689a1709652f709c99c135d4a8af
  Author: Carlos Garcia Campos <[email protected]>
  Date:   2024-08-02 (Fri, 02 Aug 2024)

  Changed paths:
    M Source/WebKit/UIProcess/API/gtk/WebKitWebViewBase.cpp

  Log Message:
  -----------
  Cherry-pick 280110@main (763d3dd18daf). 
https://bugs.webkit.org/show_bug.cgi?id=275148

    [GTK] MouseEvent movementX/Y incorrect with USE_GTK4=OFF
    https://bugs.webkit.org/show_bug.cgi?id=275148

    Reviewed by Michael Catanzaro.

    Fix the creation of MotionEvent when created with a widget and state.

    * Source/WebKit/UIProcess/API/gtk/WebKitWebViewBase.cpp:
    (MotionEvent::MotionEvent):
    (MotionEvent::setState):

    Canonical link: https://commits.webkit.org/280110@main

Canonical link: https://commits.webkit.org/274313.360@webkitglib/2.44


  Commit: f0e22ef63da315c24ef05b4155b15c37c0e3ed3e
      
https://github.com/WebKit/WebKit/commit/f0e22ef63da315c24ef05b4155b15c37c0e3ed3e
  Author: Charlie Wolfe <[email protected]>
  Date:   2024-08-02 (Fri, 02 Aug 2024)

  Changed paths:
    M Source/WebKit/UIProcess/WebBackForwardList.cpp
    M Source/WebKit/UIProcess/WebBackForwardList.h

  Log Message:
  -----------
  Cherry-pick 280102@main (63424f113b79). 
https://bugs.webkit.org/show_bug.cgi?id=275580

    `WebBackForwardList` should hold a WeakPtr to `WebPageProxy`
    https://bugs.webkit.org/show_bug.cgi?id=275580
    rdar://130025240

    Reviewed by Chris Dumez.

    * Source/WebKit/UIProcess/WebBackForwardList.cpp:
    (WebKit::WebBackForwardList::pageClosed):
    (WebKit::WebBackForwardList::addItem):
    (WebKit::WebBackForwardList::goToItem):
    (WebKit::WebBackForwardList::removeAllItems):
    (WebKit::WebBackForwardList::clear):
    (WebKit::WebBackForwardList::didRemoveItem):
    (WebKit::WebBackForwardList::protectedPage):
    * Source/WebKit/UIProcess/WebBackForwardList.h:

    Canonical link: https://commits.webkit.org/280102@main

Canonical link: https://commits.webkit.org/274313.361@webkitglib/2.44


  Commit: 4f58dca1efb9e8012bc157eed7738e23b93a2d71
      
https://github.com/WebKit/WebKit/commit/4f58dca1efb9e8012bc157eed7738e23b93a2d71
  Author: Kimmo Kinnunen <[email protected]>
  Date:   2024-08-02 (Fri, 02 Aug 2024)

  Changed paths:
    M Source/WebKit/WebProcess/WebProcess.cpp

  Log Message:
  -----------
  Cherry-pick 280022@main (5554cf00d1f4). 
https://bugs.webkit.org/show_bug.cgi?id=275435

    UI process crash when network process connection request arrives before 
settings have been initialized
    https://bugs.webkit.org/show_bug.cgi?id=275435
    rdar://129587532

    Reviewed by Cameron McCormack.

    Mark sendSync of GetNetworkProcessConnection as
    MaintainOrderingWithAsyncMessages so that previous messages are
    guaranteed to be delivered. The previous messages might initialize the
    network process settings that are needed to establish the connection.

    * Source/WebKit/WebProcess/WebProcess.cpp:
    (WebKit::getNetworkProcessConnection):

    Canonical link: https://commits.webkit.org/280022@main

Canonical link: https://commits.webkit.org/274313.362@webkitglib/2.44


  Commit: 4f72dba582131024403501ddb3d6b2c65d9d9a55
      
https://github.com/WebKit/WebKit/commit/4f72dba582131024403501ddb3d6b2c65d9d9a55
  Author: Kimmo Kinnunen <[email protected]>
  Date:   2024-08-02 (Fri, 02 Aug 2024)

  Changed paths:
    M Source/WebKit/Platform/IPC/Connection.h
    M Source/WebKit/Platform/IPC/MessageSender.h
    M Source/WebKit/Platform/IPC/StreamClientConnection.h
    M Source/WebKit/UIProcess/RemotePageProxy.h
    M Source/WebKit/UIProcess/WebPageProxy.h
    M Tools/TestWebKitAPI/Tests/IPC/ConnectionTests.cpp
    M Tools/TestWebKitAPI/Tests/IPC/IPCTestUtilities.h

  Log Message:
  -----------
  Cherry-pick 280004@main (83b7d1094b34). 
https://bugs.webkit.org/show_bug.cgi?id=275434

    REGRESSION(272822@main): IPC sync replies might use freed data
    https://bugs.webkit.org/show_bug.cgi?id=275434
    rdar://125071066

    Reviewed by Cameron McCormack.

    The commit 272822@main would remove IPC::Decoder from the
    ConnectionSendSyncResult. The decoder owns the data pointed by the
    data references. This change results in sender reading freed memory
    when reading the reply data references.

    Fix by ensuring ConnectionSendSyncResult stores the IPC::Decoder that
    owns the data referenced by the reply.

    Using data references, e.g. std::spans, in IPC messages means that the
    data is stored in the IPC message. Contrast this with messages transferring
    Vectors: the Vectors store the data.

    * Source/WebKit/Platform/IPC/Connection.h:
    (IPC::ConnectionSendSyncResult::ConnectionSendSyncResult):
    (IPC::ConnectionSendSyncResult::reply):
    (IPC::ConnectionSendSyncResult::takeReply):
    (IPC::Connection::sendSync):
    * Source/WebKit/Platform/IPC/MessageSender.h:
    * Source/WebKit/Platform/IPC/StreamClientConnection.h:
    (IPC::StreamClientConnection::trySendSyncStream):
    * Source/WebKit/UIProcess/RemotePageProxy.h:
    * Source/WebKit/UIProcess/WebPageProxy.h:
    * Tools/TestWebKitAPI/Tests/IPC/ConnectionTests.cpp:
    (TestWebKitAPI::MockTestSyncMessageWithDataReply::name):
    (TestWebKitAPI::MockTestSyncMessageWithDataReply::arguments):
    
(TestWebKitAPI::MockTestSyncMessageWithDataReply::MockTestSyncMessageWithDataReply):
    (TestWebKitAPI::TEST_P):
    * Tools/TestWebKitAPI/Tests/IPC/IPCTestUtilities.h:

    Canonical link: https://commits.webkit.org/280004@main

Canonical link: https://commits.webkit.org/274313.363@webkitglib/2.44


  Commit: cb15394c52aa44f5c88ff2a961fad4970b45262f
      
https://github.com/WebKit/WebKit/commit/cb15394c52aa44f5c88ff2a961fad4970b45262f
  Author: Keith Miller <[email protected]>
  Date:   2024-08-02 (Fri, 02 Aug 2024)

  Changed paths:
    M Source/JavaScriptCore/heap/Heap.cpp

  Log Message:
  -----------
  Cherry-pick 279920@main (89d69b59b62a). 
https://bugs.webkit.org/show_bug.cgi?id=275351

    ASSERTION FAILED: owner->get() == &Thread::current() in 
JSC::BlockDirectory::assertIsMutatorOrMutatorIsStopped for 
inspector/memory/tracking.html
    https://bugs.webkit.org/show_bug.cgi?id=275351
    rdar://problem/129580672

    Reviewed by Yusuke Suzuki.

    The assert in of `m_objectSpace.capacity() >= m_objectSpace.size()` in 
`Heap::extraMemorySize()` is
    invalid as calling `m_objectSpace.size()` requires being the mutator 
currently, which
    `WebCore::ResourceUsageThread` is not.

    * Source/JavaScriptCore/heap/Heap.cpp:
    (JSC::Heap::extraMemorySize):

    Canonical link: https://commits.webkit.org/279920@main

Canonical link: https://commits.webkit.org/274313.364@webkitglib/2.44


  Commit: 688931ebc234d6e17f66c735ce0c2bac8bec3a91
      
https://github.com/WebKit/WebKit/commit/688931ebc234d6e17f66c735ce0c2bac8bec3a91
  Author: Antti Koivisto <[email protected]>
  Date:   2024-08-02 (Fri, 02 Aug 2024)

  Changed paths:
    A LayoutTests/fast/ruby/ruby-block-anonymous-assert-expected.txt
    A LayoutTests/fast/ruby/ruby-block-anonymous-assert.html
    M Source/WebCore/rendering/updating/RenderTreeBuilderRuby.cpp

  Log Message:
  -----------
  Cherry-pick 279351@main (935af36335b8). 
https://bugs.webkit.org/show_bug.cgi?id=274751

    Faulty assert in 
RenderTreeBuilder::Ruby::findOrCreateParentForStyleBasedRubyChild
    https://bugs.webkit.org/show_bug.cgi?id=274751
    rdar://128789974

    Reviewed by Alan Baradlay.

    <ruby blockified><ruby> hits asssert.

    * LayoutTests/fast/ruby/ruby-block-anonymous-assert-expected.txt: Added.
    * LayoutTests/fast/ruby/ruby-block-anonymous-assert.html: Added.
    * Source/WebCore/rendering/updating/RenderTreeBuilderRuby.cpp:
    
(WebCore::RenderTreeBuilder::Ruby::findOrCreateParentForStyleBasedRubyChild):

    Fix the assert. Ruby-block may have a non-anonymous <ruby> child.

    Canonical link: https://commits.webkit.org/279351@main

Canonical link: https://commits.webkit.org/274313.365@webkitglib/2.44


  Commit: 4bb00092137ad29e08f3a7a76f7be354999fc6cc
      
https://github.com/WebKit/WebKit/commit/4bb00092137ad29e08f3a7a76f7be354999fc6cc
  Author: Carlos Garcia Campos <[email protected]>
  Date:   2024-08-08 (Thu, 08 Aug 2024)

  Changed paths:
    M Source/WebKit/UIProcess/gtk/AcceleratedBackingStoreDMABuf.cpp

  Log Message:
  -----------
  Cherry-pick 280197@main (847b2a717cfb). 
https://bugs.webkit.org/show_bug.cgi?id=271477

    REGRESSION(273818@main): [GTK] Eclipse crashes when rendering tooltips: 
gdk_window_create_gl_context: assertion 'GDK_IS_WINDOW (window)' failed in 
WebKit::AcceleratedBackingStoreDMABuf::ensureGLContext
    https://bugs.webkit.org/show_bug.cgi?id=271477

    Reviewed by Adrian Perez de Castro.

    Update the buffer contents on prepareForRendering to make sure the view
    is already realized, which is required to create the gl context.

    * Source/WebKit/UIProcess/gtk/AcceleratedBackingStoreDMABuf.cpp:
    (WebKit::AcceleratedBackingStoreDMABuf::frame):
    (WebKit::AcceleratedBackingStoreDMABuf::prepareForRendering):

    Canonical link: https://commits.webkit.org/280197@main

Canonical link: https://commits.webkit.org/274313.366@webkitglib/2.44


  Commit: e2c2b808e733fefd384a1e2ff6e8560184bffe8b
      
https://github.com/WebKit/WebKit/commit/e2c2b808e733fefd384a1e2ff6e8560184bffe8b
  Author: Pawel Lampe <[email protected]>
  Date:   2024-08-08 (Thu, 08 Aug 2024)

  Changed paths:
    M Source/WebCore/css/FontFace.cpp

  Log Message:
  -----------
  Cherry-pick 281080@main (7cf0e3722de9). 
https://bugs.webkit.org/show_bug.cgi?id=276607

    Unable to load a font face on nxp imx8mp platform
    https://bugs.webkit.org/show_bug.cgi?id=276607

    Reviewed by Fujii Hironori.

    This PR marks `dataRequiresAsynchronousLoading` not to be optimized or 
reordered
    thus avoiding the problems with loading font faces on ARM64 platform were 
GCC
    compiler suffers from a bug that makes it optimize lambda captures too 
aggressively.

    * Source/WebCore/css/FontFace.cpp:
    (WebCore::FontFace::create):

    Canonical link: https://commits.webkit.org/281080@main

Canonical link: https://commits.webkit.org/274313.367@webkitglib/2.44


Compare: https://github.com/WebKit/WebKit/compare/edb7c9e0df8d...e2c2b808e733

To unsubscribe from these emails, change your notification settings at 
https://github.com/WebKit/WebKit/settings/notifications
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to