Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: ba64b8f5131672964e445b50b589635a308feedb
https://github.com/WebKit/WebKit/commit/ba64b8f5131672964e445b50b589635a308feedb
Author: Ahmad Saleem <[email protected]>
Date: 2026-09-01 (Tue, 01 Sep 2026)
Changed paths:
M Source/WebCore/loader/NavigationAction.h
Log Message:
-----------
NavigationAction::m_type is left uninitialized by the default constructor
https://bugs.webkit.org/show_bug.cgi?id=322905
rdar://186162338
Reviewed by Chris Dumez.
NavigationAction's user-provided default constructor doesn't zero-fill
members, and m_type is the only one without an in-class initializer, so
it is left indeterminate. DocumentLoader default-constructs
m_triggeringAction and its type() is read (via triggeringAction())
before a real action is assigned, which is undefined behavior.
Initialize m_type to NavigationType::Other, matching the other members.
* Source/WebCore/loader/NavigationAction.h:
Canonical link: https://commits.webkit.org/320316@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
