Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 62e4c758c249442efffaa97592bd8a9770a780ec
https://github.com/WebKit/WebKit/commit/62e4c758c249442efffaa97592bd8a9770a780ec
Author: Zak Ridouh <[email protected]>
Date: 2026-04-21 (Tue, 21 Apr 2026)
Changed paths:
M
Source/WebCore/platform/graphics/avfoundation/objc/CDMInstanceFairPlayStreamingAVFObjC.mm
Log Message:
-----------
[MTE] Harden FairPlay code by using static string storage for
CDMInstanceFairPlayStreamingAVFObjC keySystem identifier
<https://bugs.webkit.org/show_bug.cgi?id=306902>
<rdar://169182803>
Reviewed by David Kilzer.
Use `MAKE_STATIC_STRING_IMPL` for the FairPlay keySystem string to place the
`StaticStringImpl`
in the `__DATA` section instead of on the heap.
This matches the pattern already used by `CDMInstanceClearKey::keySystem()`.
Heap-allocated `StringImpl` objects are not MTE-tagged, making them potentially
exploitable
via arbitrary decrement primitives in the GPU process.
*
Source/WebCore/platform/graphics/avfoundation/objc/CDMInstanceFairPlayStreamingAVFObjC.mm:
(WebCore::CDMInstanceFairPlayStreamingAVFObjC::keySystem const):
Originally-landed-as: 305413.263@safari-7624-branch (6995e81558d4).
rdar://173968929
Canonical link: https://commits.webkit.org/311742@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
