Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: e535d5008b4ad0faac481857b3c2fc0dc936d849
https://github.com/WebKit/WebKit/commit/e535d5008b4ad0faac481857b3c2fc0dc936d849
Author: Chris Dumez <[email protected]>
Date: 2026-06-29 (Mon, 29 Jun 2026)
Changed paths:
M Source/WebCore/page/LocalFrameViewLayoutContext.cpp
Log Message:
-----------
LocalFrameViewLayoutContext::removeScrollerFromAnchorScrollAdjusters mutates
m_anchorScrollAdjusters while iterating it
https://bugs.webkit.org/show_bug.cgi?id=318083
Reviewed by Alan Baradlay.
removeScrollerFromAnchorScrollAdjusters() range-iterates m_anchorScrollAdjusters
and, for each adjuster invalidated by the scroller, calls
unregisterAnchorScrollAdjusterFor(), which in turn calls removeFirstMatching()
on that same Vector. This was not safe.
* Source/WebCore/page/LocalFrameViewLayoutContext.cpp:
(WebCore::LocalFrameViewLayoutContext::removeScrollerFromAnchorScrollAdjusters):
Canonical link: https://commits.webkit.org/316000@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
