Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: eaa2b441ff2ce947929fb6965b86123905c0c858
https://github.com/WebKit/WebKit/commit/eaa2b441ff2ce947929fb6965b86123905c0c858
Author: Etienne Segonzac <[email protected]>
Date: 2026-06-29 (Mon, 29 Jun 2026)
Changed paths:
M Source/WebCore/rendering/EventRegion.cpp
Log Message:
-----------
[WebCore] Heap-use-after-free in
EventRegionContext::shrinkWrapInteractionRegions when
m_interactionRegions.insert reallocates under a held reference
rdar://175331820
Reviewed by Lily Spiniolas and Simon Fraser.
While appending new regions, if we need to modify the current one,
make sure to read back from the vector instead of reusing the reference.
* Source/WebCore/rendering/EventRegion.cpp:
(WebCore::EventRegionContext::shrinkWrapInteractionRegions):
Originally-landed-as: 305413.780@safari-7624-branch (6ccb8fc1f9e8).
rdar://180435523
Canonical link: https://commits.webkit.org/316042@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
