Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 112604f6a167ea78c004e392cd123edde551f2b5
https://github.com/WebKit/WebKit/commit/112604f6a167ea78c004e392cd123edde551f2b5
Author: Per Arne Vollan <[email protected]>
Date: 2026-08-21 (Fri, 21 Aug 2026)
Changed paths:
M Source/WebCore/page/FrameTree.cpp
Log Message:
-----------
[Site Isolation] Crash under WebFrame::fromCoreFrame
https://bugs.webkit.org/show_bug.cgi?id=322240
rdar://181259623
Reviewed by Sihui Liu.
This can happen when a LocalFrame is trying to access its RemoteFrame parent,
as the RemoteFrame
is being destroyed -- for example in response to the message
WebPage::frameWasRemovedInAnotherProcess.
Fix this by by calling detachFromParent on all the children in
FrameTree::~FrameTree().
No new tests, since reproducing this issue depends on having an extension
installed in Safari.
* Source/WebCore/page/FrameTree.cpp:
(WebCore::FrameTree::~FrameTree):
Canonical link: https://commits.webkit.org/319638@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
