Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: bebb2c5e22b4b4ac8e860834269c02c4c48b6980
https://github.com/WebKit/WebKit/commit/bebb2c5e22b4b4ac8e860834269c02c4c48b6980
Author: Vitor Roriz <[email protected]>
Date: 2026-04-16 (Thu, 16 Apr 2026)
Changed paths:
M Source/WebKit/GPUProcess/graphics/RemoteRenderingBackend.cpp
M Source/WebKit/GPUProcess/graphics/RemoteResourceCache.cpp
M Source/WebKit/GPUProcess/graphics/RemoteResourceCache.h
Log Message:
-----------
[GPU Process] Tighten security around caching Font and FontCustomPlatformData
https://bugs.webkit.org/show_bug.cgi?id=312484
rdar://174501109
Reviewed by Brent Fulgham.
Same fix as https://commits.webkit.org/309995@main but for Font and
FontCustomPlatformData. To cache these resources in GPU Process, they should not
be cached previously. If this happens, the sender process should be terminated
immediately.
* Source/WebKit/GPUProcess/graphics/RemoteRenderingBackend.cpp:
(WebKit::RemoteRenderingBackend::cacheFont):
(WebKit::RemoteRenderingBackend::cacheFontCustomPlatformData):
* Source/WebKit/GPUProcess/graphics/RemoteResourceCache.cpp:
(WebKit::RemoteResourceCache::cacheFont):
(WebKit::RemoteResourceCache::cacheFontCustomPlatformData):
* Source/WebKit/GPUProcess/graphics/RemoteResourceCache.h:
Canonical link: https://commits.webkit.org/311400@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
