Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 9235cfd7e66bc4831ffadb4d8cb76486ae54ee47
      
https://github.com/WebKit/WebKit/commit/9235cfd7e66bc4831ffadb4d8cb76486ae54ee47
  Author: Dan Hecht <[email protected]>
  Date:   2026-03-02 (Mon, 02 Mar 2026)

  Changed paths:
    M Source/WebKit/WebProcess/WebPage/IPCTestingAPI.cpp

  Log Message:
  -----------
  IPCTestingAPI: JSValueRef in the heap need to be protected
https://bugs.webkit.org/show_bug.cgi?id=308833
rdar://171366777

Reviewed by Ryosuke Niwa and Keith Miller.

itemRef is no longer reachable from the stack after each iteration
completes, so the copies stashed in the vector heap storage need
to be protected.

Testing: caught by running layout tests with JSC_collectContinously=1 
JSC_useZombieMode=1

* Source/WebKit/WebProcess/WebPage/IPCTestingAPI.cpp:
(WebKit::IPCTestingAPI::VectorEncodeHelper::encode const):
(WebKit::IPCTestingAPI::encodeArrayArgument):

Canonical link: https://commits.webkit.org/308470@main



To unsubscribe from these emails, change your notification settings at 
https://github.com/WebKit/WebKit/settings/notifications

Reply via email to