Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 50a93108b1000603cb4452ef5ee99805d5a94b0e
      
https://github.com/WebKit/WebKit/commit/50a93108b1000603cb4452ef5ee99805d5a94b0e
  Author: Chris Dumez <[email protected]>
  Date:   2026-01-06 (Tue, 06 Jan 2026)

  Changed paths:
    M Tools/WebKitTestRunner/TestController.cpp

  Log Message:
  -----------
  Regression(300777@main): Use after free in WTR::makeOpenPanelURL()
https://bugs.webkit.org/show_bug.cgi?id=304966

Reviewed by Ryosuke Niwa.

The code was storing the result of `utf8().data()` in a local variable
and using it later on. This was a use-after-free since the pointer
returned by `data()` pointer to memory owned by the temporary CString
returned by `utf8()`.

* Tools/WebKitTestRunner/TestController.cpp:

Canonical link: https://commits.webkit.org/305149@main



To unsubscribe from these emails, change your notification settings at 
https://github.com/WebKit/WebKit/settings/notifications

Reply via email to