Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 0dca5c74315b36f9f0543153653d67bb3be8d670
      
https://github.com/WebKit/WebKit/commit/0dca5c74315b36f9f0543153653d67bb3be8d670
  Author: Jessica Lee <[email protected]>
  Date:   2026-09-22 (Tue, 22 Sep 2026)

  Changed paths:
    M Source/WebKit/UIProcess/WebPageProxy.cpp
    M Tools/TestWebKitAPI/Tests/WebKit/WKWebView/SiteIsolation.mm

  Log Message:
  -----------
  [Site Isolation]Saturate string match count instead of overflowing across 
processes
https://bugs.webkit.org/show_bug.cgi?id=324607
rdar://187840494

Reviewed by Ryosuke Niwa.

CountStringMatchesCallbackAggregator summed the match counts per process but 
did not
check if any process's matchCount exceeded more than the maximum 
kWKMoreThanMaximumMatchCount
If the mainframe has already exceeded the maximum match count but the iframe 
had an additional
match, the total count UINT32_MAX + 1 would be summed and wrap around to zero. 
The fix is to
saturate match count at kWKMoreThanMaximumMatchCount.

Test: Tools/TestWebKitAPI/Tests/WebKit/WKWebView/SiteIsolation.mm

* Source/WebKit/UIProcess/WebPageProxy.cpp:
(WebKit::WebPageProxy::countStringMatches):
* Tools/TestWebKitAPI/Tests/WebKit/WKWebView/SiteIsolation.mm:
(TestWebKitAPI::TEST(SiteIsolation, CountStringMatchesOverflowSaturates)):

Canonical link: https://commits.webkit.org/321584@main



To unsubscribe from these emails, change your notification settings at 
https://github.com/WebKit/WebKit/settings/notifications

Reply via email to