Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: f355fb943c1d521b2bda10f06b8b060e64877e17
      
https://github.com/WebKit/WebKit/commit/f355fb943c1d521b2bda10f06b8b060e64877e17
  Author: Antoine Quint <[email protected]>
  Date:   2026-03-11 (Wed, 11 Mar 2026)

  Changed paths:
    M Source/WebCore/animation/StyleOriginatedTimelinesController.cpp

  Log Message:
  -----------
  [scroll-animations] crash under 
`StyleOriginatedTimelinesController::unregisterNamedTimeline()` due to iterator 
mutation
https://bugs.webkit.org/show_bug.cgi?id=309672
rdar://172271230

Reviewed by Pascoe.

Ensure we make a copy of a timeline's animations before we iterate over it
and possibly mutate it under `CSSAnimation::syncStyleOriginatedTimeline()`
which can call `WebAnimation::setTimeline()` and change the very timeline
animation list we're iterating over.

* Source/WebCore/animation/StyleOriginatedTimelinesController.cpp:
(WebCore::StyleOriginatedTimelinesController::unregisterNamedTimeline):

Canonical link: https://commits.webkit.org/309059@main



To unsubscribe from these emails, change your notification settings at 
https://github.com/WebKit/WebKit/settings/notifications

Reply via email to