Branch: refs/heads/webkitglib/2.50
Home: https://github.com/WebKit/WebKit
Commit: cc2d959c37d0bd6332b038db62b5b69b5baa59ea
https://github.com/WebKit/WebKit/commit/cc2d959c37d0bd6332b038db62b5b69b5baa59ea
Author: Chris Dumez <cdu...@apple.com>
Date: 2025-08-28 (Thu, 28 Aug 2025)
Changed paths:
M Source/WebCore/Modules/indexeddb/IDBTransaction.cpp
Log Message:
-----------
Cherry-pick 298424@main (6866fd6e4b22).
https://bugs.webkit.org/show_bug.cgi?id=292340
Crash under IDBTransaction::requestPutOrAdd()
https://bugs.webkit.org/show_bug.cgi?id=292340
rdar://149937426
Reviewed by Sihui Liu and Per Arne Vollan.
The code was constructing the IDBResultData on the background thread and
then
capturing it in the lambda with a WTFMove() before using it on the main
thread.
This didn't look thread-safe. We could call `isolatedCopy()` but I have
opted
to delay the construction of the IDBResultData until we're on the main
thread.
* Source/WebCore/Modules/indexeddb/IDBTransaction.cpp:
(WebCore::IDBTransaction::putOrAddOnServer):
Originally-landed-as: 289651.475@safari-7621-branch (05d9b16c830a).
rdar://157794363
Canonical link: https://commits.webkit.org/298424@main
Canonical link: https://commits.webkit.org/298234.72@webkitglib/2.50
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes
