Branch: refs/heads/webkitglib/2.50
  Home:   https://github.com/WebKit/WebKit
  Commit: 41fce92f762e6692d9aead0687e324c62ef8bf44
      
https://github.com/WebKit/WebKit/commit/41fce92f762e6692d9aead0687e324c62ef8bf44
  Author: Simon Pena <[email protected]>
  Date:   2026-03-17 (Tue, 17 Mar 2026)

  Changed paths:
    M Source/WebCore/platform/audio/glib/MediaSessionGLib.cpp
    M Source/WebCore/platform/audio/glib/MediaSessionGLib.h

  Log Message:
  -----------
  Cherry-pick 309395@main (1a109d5e2873). 
https://bugs.webkit.org/show_bug.cgi?id=310033

    [GLib] Stop retrying D-Bus connection for MPRIS after initial failure
    https://bugs.webkit.org/show_bug.cgi?id=310033

    Reviewed by Philippe Normand.

    MPRIS session creation unconditionally attempts to connect to D-Bus,
    even after previous attempts have failed. On devices where D-Bus is not
    available or the right environment is not configured, this will continue
    generating warnings. This keeps track of the failure and avoids
    re-attempting.

    Tested after unsetting the D-Bus session address.

    * Source/WebCore/platform/audio/glib/MediaSessionGLib.cpp:
    (WebCore::MediaSessionGLib::create):
    * Source/WebCore/platform/audio/glib/MediaSessionGLib.h:

    Canonical link: https://commits.webkit.org/309395@main

Canonical link: https://commits.webkit.org/298234.506@webkitglib/2.50


  Commit: c09ec20f4e59b7521ed0b30a7b72ef79d3103ced
      
https://github.com/WebKit/WebKit/commit/c09ec20f4e59b7521ed0b30a7b72ef79d3103ced
  Author: Antoine Quint <[email protected]>
  Date:   2026-03-17 (Tue, 17 Mar 2026)

  Changed paths:
    M Source/WebCore/animation/StyleOriginatedTimelinesController.cpp

  Log Message:
  -----------
  Cherry-pick 309059@main (f355fb943c1d). 
https://bugs.webkit.org/show_bug.cgi?id=309672

    [scroll-animations] crash under 
`StyleOriginatedTimelinesController::unregisterNamedTimeline()` due to iterator 
mutation
    https://bugs.webkit.org/show_bug.cgi?id=309672
    rdar://172271230

    Reviewed by Pascoe.

    Ensure we make a copy of a timeline's animations before we iterate over it
    and possibly mutate it under `CSSAnimation::syncStyleOriginatedTimeline()`
    which can call `WebAnimation::setTimeline()` and change the very timeline
    animation list we're iterating over.

    * Source/WebCore/animation/StyleOriginatedTimelinesController.cpp:
    (WebCore::StyleOriginatedTimelinesController::unregisterNamedTimeline):

    Canonical link: https://commits.webkit.org/309059@main

Canonical link: https://commits.webkit.org/298234.507@webkitglib/2.50


  Commit: c730bbb3440c0816471a0fece289e1d68d2f2d7e
      
https://github.com/WebKit/WebKit/commit/c730bbb3440c0816471a0fece289e1d68d2f2d7e
  Author: Pascoe <[email protected]>
  Date:   2026-03-17 (Tue, 17 Mar 2026)

  Changed paths:
    M Source/WebCore/animation/StyleOriginatedTimelinesController.cpp

  Log Message:
  -----------
  Cherry-pick 309061@main (55ffc93c06b7). 
https://bugs.webkit.org/show_bug.cgi?id=309632

    Fix iterator invalidation crash in 
StyleOriginatedTimelinesController::styleableWasRemoved
    https://bugs.webkit.org/show_bug.cgi?id=309632
    rdar://172219384

    Reviewed by Antoine Quint.

    attachAnimation() calls setTimeline() → setTimelineInternal() → 
removeAnimation(*this),
    which mutates the ListHashSet being iterated, invalidating the iterator and 
causing
    EXC_BAD_ACCESS when copying the next Ref.

    Snapshot the animations into a Vector before iterating, same pattern used in
    AnimationTimelinesController.cpp:150.

    * Source/WebCore/animation/StyleOriginatedTimelinesController.cpp:
    (WebCore::StyleOriginatedTimelinesController::styleableWasRemoved):

    Canonical link: https://commits.webkit.org/309061@main

Canonical link: https://commits.webkit.org/298234.508@webkitglib/2.50


  Commit: 57988cd82d48417ad044a2f464a0a482d8d97141
      
https://github.com/WebKit/WebKit/commit/57988cd82d48417ad044a2f464a0a482d8d97141
  Author: Nikolas Zimmermann <[email protected]>
  Date:   2026-03-17 (Tue, 17 Mar 2026)

  Changed paths:
    M Source/WebCore/rendering/RenderTheme.cpp

  Log Message:
  -----------
  Cherry-pick 308546@main (b859116b450c). 
https://bugs.webkit.org/show_bug.cgi?id=309006

    RenderTheme::updateSliderTrackPart() may divides by zero when computing 
datalist tick ratios
    https://bugs.webkit.org/show_bug.cgi?id=309006

    Reviewed by Simon Fraser.

    The tick ratio calculation divides by (maximum - minimum) without guarding
    against zero, unlike the thumb position calculation which already performs
    this check. When max == min (e.g. max="0"), this produces NaN values that
    propagate into SliderTrackPart::drawTicks() creating an unsorted FloatRect.

    This fixes a crash in invalid-datalist-options-crash.html (WPT test in
    imported/w3c/web-platform-tests/html/semantics/forms/the-input-element) for
    the GTK/WPE ports, where the unsorted rect triggers an assertion in
    SkCanvas::onDrawRect in SKIA_DEBUG enabled builds.

    Covered by existing tests.

    * Source/WebCore/rendering/RenderTheme.cpp:
    (WebCore::updateSliderTrackPartForRenderer):

    Canonical link: https://commits.webkit.org/308546@main

Canonical link: https://commits.webkit.org/298234.509@webkitglib/2.50


Compare: https://github.com/WebKit/WebKit/compare/63348060637c...57988cd82d48

To unsubscribe from these emails, change your notification settings at 
https://github.com/WebKit/WebKit/settings/notifications

Reply via email to