Branch: refs/heads/safari-7620.2.4.14-branch
  Home:   https://github.com/WebKit/WebKit
  Commit: e5b7ac359e3b66ff5043730731f68a1a93c003a8
      
https://github.com/WebKit/WebKit/commit/e5b7ac359e3b66ff5043730731f68a1a93c003a8
  Author: Mohsin Qureshi <[email protected]>
  Date:   2024-12-17 (Tue, 17 Dec 2024)

  Changed paths:
    M Configurations/Version.xcconfig

  Log Message:
  -----------
  Versioning.

WebKit-7620.2.4.14.1

Canonical link: https://commits.webkit.org/[email protected]


  Commit: e11fd697c2b5853eba0a3674dc17b230d31dba8b
      
https://github.com/WebKit/WebKit/commit/e11fd697c2b5853eba0a3674dc17b230d31dba8b
  Author: Mohsin Qureshi <[email protected]>
  Date:   2025-01-07 (Tue, 07 Jan 2025)

  Changed paths:
    M Configurations/Version.xcconfig

  Log Message:
  -----------
  Versioning.

WebKit-7620.2.4.14.2

Canonical link: https://commits.webkit.org/[email protected]


  Commit: 367ec7c19c49beab2ba28049e388ade8dc102ac9
      
https://github.com/WebKit/WebKit/commit/367ec7c19c49beab2ba28049e388ade8dc102ac9
  Author: Timothy Hatcher <[email protected]>
  Date:   2025-01-07 (Tue, 07 Jan 2025)

  Changed paths:
    M Source/WebKit/UIProcess/Extensions/Cocoa/WebExtensionCocoa.mm
    M 
Source/WebKit/UIProcess/Extensions/Cocoa/WebExtensionDynamicScriptsCocoa.mm

  Log Message:
  -----------
  Cherry-pick 144dde143d3a. rdar://142452073

    Hang in +[NSString 
stringEncodingForData:encodingOptions:convertedString:usedLossyConversion:].
    https://webkit.org/b/285533
    rdar://142452073

    Reviewed by Brian Weinstein.

    Use WebCore::TextResourceDecoder instead of +[NSString 
stringEncodingForData:].
    Also cache the result so detection only happens once, and avoids disk 
access when
    an extension is executing the same script over and over in many tabs.

    * Source/WebKit/UIProcess/Extensions/Cocoa/WebExtensionCocoa.mm:
    (WebKit::WebExtension::resourceStringForPath): Use TextResourceDecoder.
    * 
Source/WebKit/UIProcess/Extensions/Cocoa/WebExtensionDynamicScriptsCocoa.mm:
    (WebKit::WebExtensionDynamicScripts::sourcePairForResource): Cache the 
result.

    Canonical link: https://commits.webkit.org/283286.606@safari-7620-branch


  Commit: 10bb9943bdf1bcb642e131e9a899b479f4f12b25
      
https://github.com/WebKit/WebKit/commit/10bb9943bdf1bcb642e131e9a899b479f4f12b25
  Author: Mohsin Qureshi <[email protected]>
  Date:   2025-01-08 (Wed, 08 Jan 2025)

  Changed paths:
    M Configurations/Version.xcconfig

  Log Message:
  -----------
  Versioning.

WebKit-7620.2.4.14.3

Canonical link: https://commits.webkit.org/[email protected]


  Commit: f207e51d88887d01df7401aaa40ba512acb39fe6
      
https://github.com/WebKit/WebKit/commit/f207e51d88887d01df7401aaa40ba512acb39fe6
  Author: Sihui Liu <[email protected]>
  Date:   2025-01-08 (Wed, 08 Jan 2025)

  Changed paths:
    M Source/WTF/wtf/CrossThreadTask.h
    M Source/WTF/wtf/TypeTraits.h

  Log Message:
  -----------
  Cherry-pick 0a6d878611ce. rdar://142557914

    Web content process crash in WebCore::Event::~Event
    rdar://141997895

    Reviewed by Chris Dumez.

    rdar://139782420 made IDBDatabase subclass 
ThreadSafeRefCountedAndCanMakeThreadSafeWeakPtr. However,
    createCrossThreadTask() does not capture RefPtr for derived classes of 
ThreadSafeRefCountedAndCanMakeThreadSafeWeakPtr.
    To fix it, make sure createCrossThreadTask() creates RefPtr when ref() 
member function is available.

    * Source/WTF/wtf/CrossThreadTask.h:
    (WTF::createCrossThreadTask):
    * Source/WTF/wtf/TypeTraits.h:

    Canonical link: https://commits.webkit.org/283286.605@safari-7620-branch


  Commit: 30339d0d8ee49d2af25b2a4eb0641249f7316909
      
https://github.com/WebKit/WebKit/commit/30339d0d8ee49d2af25b2a4eb0641249f7316909
  Author: Yusuke Suzuki <[email protected]>
  Date:   2025-01-08 (Wed, 08 Jan 2025)

  Changed paths:
    A JSTests/wasm/stress/array-element-creation.js
    A JSTests/wasm/stress/resources/array-element-creation.wasm
    M Source/JavaScriptCore/wasm/WasmOperations.cpp
    M Source/JavaScriptCore/wasm/WasmOperationsInlines.h
    M Source/JavaScriptCore/wasm/js/JSWebAssemblyArray.cpp
    M Source/JavaScriptCore/wasm/js/JSWebAssemblyArray.h
    M Source/JavaScriptCore/wasm/js/JSWebAssemblyInstance.cpp
    M Source/JavaScriptCore/wasm/js/JSWebAssemblyInstance.h

  Log Message:
  -----------
  Cherry-pick ac2bd207812a. rdar://141144921

    [JSC] WasmGC Array is broken for GC
    https://bugs.webkit.org/show_bug.cgi?id=285580
    rdar://141144921

    Reviewed by Keith Miller.

    WasmGC Array is broken for GC in multiple ways. We carefully reviewed WasmGC
    Array implementation. We found many issues, and this patch fixes them.

    1. Doing GC while putting GC values in FixedVector. That's totally
       wrong. We fixed it by first creating WasmGC Array and modifying the
       contents later.
    2. arrayNewElem is always creating I64 array, which is broken. We should
       create a specified typed array.
    3. WasmGC Array copy implementation is using std::copy even for
       overlapping region. That's totally wrong, and it should use memmove.
       For GC-ref-types, we should use gcSafeMemmove.

    * JSTests/wasm/stress/array-element-creation.js: Added.
    * JSTests/wasm/stress/resources/array-element-creation.wasm: Added.
    * Source/JavaScriptCore/wasm/WasmOperations.cpp:
    (JSC::Wasm::JSC_DEFINE_NOEXCEPT_JIT_OPERATION):
    * Source/JavaScriptCore/wasm/WasmOperationsInlines.h:
    (JSC::Wasm::fillArray):
    (JSC::Wasm::arrayNew):
    (JSC::Wasm::copyElementsInReverse):
    (JSC::Wasm::arrayNewFixed):
    (JSC::Wasm::createArrayFromDataSegment):
    (JSC::Wasm::arrayNewData):
    (JSC::Wasm::arrayNewElem):
    (JSC::Wasm::arrayInitElem):
    (JSC::Wasm::arrayInitData):
    (JSC::Wasm::createArrayValue): Deleted.
    (JSC::Wasm::createArrayFromElementSegment): Deleted.
    * Source/JavaScriptCore/wasm/js/JSWebAssemblyArray.cpp:
    (JSC::JSWebAssemblyArray::JSWebAssemblyArray):
    (JSC::JSWebAssemblyArray::fill):
    (JSC::JSWebAssemblyArray::copy):
    (JSC::JSWebAssemblyArray::visitChildrenImpl):
    * Source/JavaScriptCore/wasm/js/JSWebAssemblyArray.h:
    * Source/JavaScriptCore/wasm/js/JSWebAssemblyInstance.cpp:
    (JSC::JSWebAssemblyInstance::copyDataSegment):
    (JSC::JSWebAssemblyInstance::copyElementSegment):
    * Source/JavaScriptCore/wasm/js/JSWebAssemblyInstance.h:

    Canonical link: https://commits.webkit.org/283286.607@safari-7620-branch


Compare: https://github.com/WebKit/WebKit/compare/e5b7ac359e3b%5E...30339d0d8ee4

To unsubscribe from these emails, change your notification settings at 
https://github.com/WebKit/WebKit/settings/notifications
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to