Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: df1c872b25dd48cdfab23126f83b62eaf369030d
https://github.com/WebKit/WebKit/commit/df1c872b25dd48cdfab23126f83b62eaf369030d
Author: Charlie Wolfe <[email protected]>
Date: 2026-06-19 (Fri, 19 Jun 2026)
Changed paths:
M Source/WebKit/Shared/Cocoa/CoreIPCSecureCoding.mm
M Tools/TestWebKitAPI/Tests/WebKit/WebPage/WebPageNavigationTests.swift
Log Message:
-----------
SecureCoding::applyProcessCreationParameters dereferences a null unique_ptr
https://bugs.webkit.org/show_bug.cgi?id=317432
rdar://180061163
Reviewed by Richard Robinson.
exemptClassNames is a reference to the process-global
std::unique_ptr<HashSet<String>>, which
RELEASE_ASSERT(!exemptClassNames) has just proven to be null. The code then
evaluated
`*exemptClassNames = WTF::move(*parameters....)`, calling unique_ptr::operator*
on the null pointer.
Move the whole unique_ptr instead of dereferencing both sides.
* Source/WebKit/Shared/Cocoa/CoreIPCSecureCoding.mm:
(WebKit::SecureCoding::applyProcessCreationParameters):
* Tools/TestWebKitAPI/Tests/WebKit/WebPage/WebPageNavigationTests.swift:
(WebPageNavigationTests.secureCodingExemptClassesAppliedToAuxiliaryProcess):
Canonical link: https://commits.webkit.org/315546@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
