Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 3fe28c6ca9963aa0f9ca9f1e42e55234a38c766f
      
https://github.com/WebKit/WebKit/commit/3fe28c6ca9963aa0f9ca9f1e42e55234a38c766f
  Author: Nipun Shukla <[email protected]>
  Date:   2025-12-18 (Thu, 18 Dec 2025)

  Changed paths:
    A 
LayoutTests/http/wpt/webcodecs/audioData-copyTo-last-channel-does-not-crash-expected.txt
    A 
LayoutTests/http/wpt/webcodecs/audioData-copyTo-last-channel-does-not-crash.html
    M Source/WebCore/platform/audio/cocoa/PlatformRawAudioDataCocoa.cpp

  Log Message:
  -----------
  REGRESSION (Safari 26): AudioData.copyTo() crashes the tab with valid 
conversion
https://bugs.webkit.org/show_bug.cgi?id=302521
rdar://164730320

Reviewed by Jean-Yves Avenard.

The RELEASE_ASSERT in PlatformRawAudioDataCocoa::copyTo() required
(increment - 2) more elements than necessary. This caused crashes
when copying planeIndex 2 from 3-channel AudioData.

Test: http/wpt/webcodecs/audioData-copyTo-last-channel-does-not-crash.html

* 
LayoutTests/http/wpt/webcodecs/audioData-copyTo-last-channel-does-not-crash-expected.txt:
 Added.
* 
LayoutTests/http/wpt/webcodecs/audioData-copyTo-last-channel-does-not-crash.html:
 Added.
* Source/WebCore/platform/audio/cocoa/PlatformRawAudioDataCocoa.cpp:
(WebCore::PlatformRawAudioData::copyTo):

Canonical link: https://commits.webkit.org/304728@main



To unsubscribe from these emails, change your notification settings at 
https://github.com/WebKit/WebKit/settings/notifications

Reply via email to