[webkit-changes] [WebKit/WebKit] 4ac633: Versioning.

Russell Epstein noreply at github.com
Wed Oct 25 13:53:17 PDT 2023


  Branch: refs/heads/safari-7615.1.26.110-branch
  Home:   https://github.com/WebKit/WebKit
  Commit: 4ac633a7222fcdc7250cabd63f651f15e83ec24f
      https://github.com/WebKit/WebKit/commit/4ac633a7222fcdc7250cabd63f651f15e83ec24f
  Author: Russell Epstein <repstein at apple.com>
  Date:   2023-03-31 (Fri, 31 Mar 2023)

  Changed paths:
    M Configurations/Version.xcconfig

  Log Message:
  -----------
  Versioning.

WebKit-7615.1.26.11.23

Identifier: 259548.391 at safari-7615.1.26.11-branch


  Commit: 1a04bf9ceb90a090e3f8e78c35ea2a06e62e4f72
      https://github.com/WebKit/WebKit/commit/1a04bf9ceb90a090e3f8e78c35ea2a06e62e4f72
  Author: Alex Christensen <achristensen at apple.com>
  Date:   2023-03-31 (Fri, 31 Mar 2023)

  Changed paths:
    M Source/WebKit/GPUProcess/GPUConnectionToWebProcess.cpp
    M Source/WebKit/GPUProcess/GPUConnectionToWebProcess.h
    M Source/WebKit/GPUProcess/GPUProcess.cpp
    M Source/WebKit/GPUProcess/GPUProcess.h
    M Source/WebKit/GPUProcess/GPUProcess.messages.in
    M Source/WebKit/Shared/GPUProcessConnectionParameters.h
    M Source/WebKit/UIProcess/GPU/GPUProcessProxy.cpp
    M Source/WebKit/UIProcess/GPU/GPUProcessProxy.h
    M Source/WebKit/UIProcess/WebProcessPool.cpp
    M Source/WebKit/UIProcess/WebProcessProxy.cpp
    M Source/WebKit/UIProcess/WebProcessProxy.h

  Log Message:
  -----------
  Cherry-pick 3891a934a192. rdar://problem/107153896

    Verify WebGPU is enabled in GPUConnectionToWebProcess::createRemoteGPU
    https://bugs.webkit.org/show_bug.cgi?id=254373
    rdar://107153896

    Reviewed by Myles C. Maxfield, Geoffrey Garen and Chris Dumez.

    Have the GPUConnectionToWebProcess keep a boolean to keep track of whether
    WebGPU is enabled for any Page in that process.  Update the boolean when
    adding or removing a Page.  If we get a message to use the entry point of
    WebGPU and WebGPU is disabled, then terminate the web content process
    from which the message came instead of creating a RemoteGPU.

    * Source/WebKit/GPUProcess/GPUConnectionToWebProcess.cpp:
    (WebKit::m_webGPUEnabled):
    (WebKit::GPUConnectionToWebProcess::createRemoteGPU):
    (WebKit::m_routingArbitrator): Deleted.
    * Source/WebKit/GPUProcess/GPUConnectionToWebProcess.h:
    (WebKit::GPUConnectionToWebProcess::updateWebGPUEnabled):
    * Source/WebKit/GPUProcess/GPUProcess.cpp:
    (WebKit::GPUProcess::updateWebGPUEnabled):
    * Source/WebKit/GPUProcess/GPUProcess.h:
    * Source/WebKit/GPUProcess/GPUProcess.messages.in:
    * Source/WebKit/Shared/GPUProcessConnectionParameters.h:
    (WebKit::GPUProcessConnectionParameters::encode const):
    (WebKit::GPUProcessConnectionParameters::decode):
    * Source/WebKit/UIProcess/GPU/GPUProcessProxy.cpp:
    (WebKit::GPUProcessProxy::updateWebGPUEnabled):
    * Source/WebKit/UIProcess/GPU/GPUProcessProxy.h:
    * Source/WebKit/UIProcess/WebProcessPool.cpp:
    (WebKit::WebProcessPool::createGPUProcessConnection):
    * Source/WebKit/UIProcess/WebProcessProxy.cpp:
    (WebKit::WebProcessProxy::addExistingWebPage):
    (WebKit::WebProcessProxy::removeWebPage):
    (WebKit::WebProcessProxy::updateWebGPUEnabledStateInGPUProcess):
    * Source/WebKit/UIProcess/WebProcessProxy.h:

    Canonical link: https://commits.webkit.org/259548.478@safari-7615-branch

Identifier: 259548.392 at safari-7615.1.26.11-branch


  Commit: 7a49b97bd9e59bfd547d8ae8ef135d6665216f17
      https://github.com/WebKit/WebKit/commit/7a49b97bd9e59bfd547d8ae8ef135d6665216f17
  Author: Youenn Fablet <youennf at gmail.com>
  Date:   2023-03-31 (Fri, 31 Mar 2023)

  Changed paths:
    M Source/WebCore/platform/mediastream/mac/AVVideoCaptureSource.h
    M Source/WebCore/platform/mediastream/mac/AVVideoCaptureSource.mm

  Log Message:
  -----------
  Apply patch. rdar://problem/106142457

    REGRESSION iOS 16.4 beta selects ultra-wide for facingMode: environment
    https://bugs.webkit.org/show_bug.cgi?id=253186
    rdar://problem/106142457

    Reviewed by Jer Noble.

    For ultra wide back cameras, add a zoomn factor of 2 so that a zoom of 1 corresponds to a standard FOV.
    We compute this factor once and we then divide by this factor for capabilities and multiply by this factor for settings.
    Manually tested on device.

    * Source/WebCore/platform/mediastream/mac/AVVideoCaptureSource.h:
    * Source/WebCore/platform/mediastream/mac/AVVideoCaptureSource.mm:
    (WebCore::AVVideoCaptureSource::computeMinZoom const):
    (WebCore::AVVideoCaptureSource::computeMaxZoom const):
    (WebCore::cameraZoomScaleFactor):
    (WebCore::AVVideoCaptureSource::AVVideoCaptureSource):
    (WebCore::AVVideoCaptureSource::setFrameRateAndZoomWithPreset):
    (WebCore::AVVideoCaptureSource::generatePresets):
    (WebCore::computeMaxZoom): Deleted.

    Canonical link: https://commits.webkit.org/261877@main

Identifier: 259548.393 at safari-7615.1.26.11-branch


  Commit: ef3f9d54a355c4cca7532546c678b2f4f619f919
      https://github.com/WebKit/WebKit/commit/ef3f9d54a355c4cca7532546c678b2f4f619f919
  Author: Myah Cobbs <mcobbs at apple.com>
  Date:   2023-03-31 (Fri, 31 Mar 2023)

  Changed paths:
    M Source/WebCore/platform/mediastream/mac/AVVideoCaptureSource.h
    M Source/WebCore/platform/mediastream/mac/AVVideoCaptureSource.mm

  Log Message:
  -----------
  Revert "Apply patch. rdar://problem/106142457"

This reverts commit 7a49b97bd9e59bfd547d8ae8ef135d6665216f17.

Identifier: 259548.394 at safari-7615.1.26.11-branch


  Commit: 1039f0c3235ffd9a6584657adb34db10c562e4af
      https://github.com/WebKit/WebKit/commit/1039f0c3235ffd9a6584657adb34db10c562e4af
  Author: Mark Lam <mark.lam at apple.com>
  Date:   2023-03-31 (Fri, 31 Mar 2023)

  Changed paths:
    M Source/JavaScriptCore/heap/Heap.cpp
    M Source/JavaScriptCore/heap/Heap.h
    M Source/JavaScriptCore/heap/HeapInlines.h
    M Source/JavaScriptCore/runtime/ArgList.cpp
    M Source/JavaScriptCore/runtime/ArgList.h
    M Source/WebCore/Modules/webaudio/AudioWorkletProcessor.cpp
    M Source/WebCore/Modules/webaudio/AudioWorkletProcessor.h
    M Source/WebCore/bindings/js/SerializedScriptValue.cpp

  Log Message:
  -----------
  Cherry-pick 2c49ff7b0481. rdar://problem/107369977

    CloneDeserializer::deserialize() should store cell pointers in a MarkedVector.
    https://bugs.webkit.org/show_bug.cgi?id=254797
    rdar://107369977

    Reviewed by Justin Michaud.

    Previously, CloneDeserializer::deserialize() was storing pointers to newly created objects
    in a few Vectors.  This is problematic because the GC is not aware of Vectors, and cannot
    scan them.  In this patch, we refactor the MarkedArgumentBuffer class into a MarkedVector
    template class that offer 2 enhancements:

    1. It can be configured to store specific types of cell pointer types.  This avoids us
       having to constantly cast JSValues into these pointers.

    2. It allows us to specify the type of OverflowHandler we want to use.  In this case,
       we want to use CrashOnOverflow.  The previous MarkedArgumentBuffer always assumes
       RecordOnOverflow.  This allows us to avoid having to manually check for overflows,
       or have to use appendWithCrashOnOverflow.  For our current needs, MarkedVector can be
       used as a drop in replacement for Vector.

    And we fix the CloneDeserializer::deserialize() issue by replacing the use of Vectors
    with MarkedVector instead.

    * Source/JavaScriptCore/heap/Heap.cpp:
    (JSC::Heap::addCoreConstraints):
    * Source/JavaScriptCore/heap/Heap.h:
    * Source/JavaScriptCore/heap/HeapInlines.h:
    * Source/JavaScriptCore/runtime/ArgList.cpp:
    (JSC::MarkedVectorBase::addMarkSet):
    (JSC::MarkedVectorBase::markLists):
    (JSC::MarkedVectorBase::slowEnsureCapacity):
    (JSC::MarkedVectorBase::expandCapacity):
    (JSC::MarkedVectorBase::slowAppend):
    (JSC::MarkedArgumentBufferBase::addMarkSet): Deleted.
    (JSC::MarkedArgumentBufferBase::markLists): Deleted.
    (JSC::MarkedArgumentBufferBase::slowEnsureCapacity): Deleted.
    (JSC::MarkedArgumentBufferBase::expandCapacity): Deleted.
    (JSC::MarkedArgumentBufferBase::slowAppend): Deleted.
    * Source/JavaScriptCore/runtime/ArgList.h:
    (JSC::MarkedVectorWithSize::MarkedVectorWithSize):
    (JSC::MarkedVectorWithSize::at const):
    (JSC::MarkedVectorWithSize::clear):
    (JSC::MarkedVectorWithSize::append):
    (JSC::MarkedVectorWithSize::appendWithCrashOnOverflow):
    (JSC::MarkedVectorWithSize::last const):
    (JSC::MarkedVectorWithSize::takeLast):
    (JSC::MarkedVectorWithSize::ensureCapacity):
    (JSC::MarkedVectorWithSize::hasOverflowed):
    (JSC::MarkedVectorWithSize::fill):
    (JSC::MarkedArgumentBufferWithSize::MarkedArgumentBufferWithSize): Deleted.
    * Source/WebCore/Modules/webaudio/AudioWorkletProcessor.cpp:
    (WebCore::AudioWorkletProcessor::buildJSArguments):
    * Source/WebCore/Modules/webaudio/AudioWorkletProcessor.h:
    * Source/WebCore/bindings/js/SerializedScriptValue.cpp:
    (WebCore::CloneDeserializer::deserialize):

    Canonical link: https://commits.webkit.org/259548.530@safari-7615-branch

Identifier: 259548.395 at safari-7615.1.26.11-branch


  Commit: 7cca9947b754ed63c6f82205f7aa06c4f35de833
      https://github.com/WebKit/WebKit/commit/7cca9947b754ed63c6f82205f7aa06c4f35de833
  Author: Russell Epstein <repstein at apple.com>
  Date:   2023-04-10 (Mon, 10 Apr 2023)

  Changed paths:
    M Configurations/Version.xcconfig

  Log Message:
  -----------
  Versioning.

WebKit-7615.1.26.110.1

Canonical link: https://commits.webkit.org/259548.396@safari-7615.1.26.110-branch


  Commit: 3e2416828cb294b05abb578a2317d1be81cbaecd
      https://github.com/WebKit/WebKit/commit/3e2416828cb294b05abb578a2317d1be81cbaecd
  Author: Antoine Quint <graouts at webkit.org>
  Date:   2023-04-10 (Mon, 10 Apr 2023)

  Changed paths:
    M Source/WebCore/animation/WebAnimation.cpp

  Log Message:
  -----------
  Cherry-pick 1d6fe184ea53. rdar://problem/107856564

    Potential use-after-free in WebAnimation::commitStyles
    https://bugs.webkit.org/show_bug.cgi?id=254840
    rdar://107444873

    Reviewed by Dean Jackson and Darin Adler.

    Ensure that the animation's effect and target are kept alive for the duration of this method
    since it is possible that calling updateStyleIfNeeded() could call into JavaScript and thus
    these two pointers could be changed to a null value using the Web Animations API.

    * Source/WebCore/animation/WebAnimation.cpp:
    (WebCore::WebAnimation::commitStyles):

    Canonical link: https://commits.webkit.org/259548.532@safari-7615-branch

Canonical link: https://commits.webkit.org/259548.397@safari-7615.1.26.110-branch


  Commit: 378e987add61c12b5367bdba0e8d52f3e0b347f7
      https://github.com/WebKit/WebKit/commit/378e987add61c12b5367bdba0e8d52f3e0b347f7
  Author: Michael Saboff <msaboff at apple.com>
  Date:   2023-04-10 (Mon, 10 Apr 2023)

  Changed paths:
    A JSTests/stress/string-replace-regexp-matchBOL-correct-advancing.js
    M Source/JavaScriptCore/runtime/StringPrototype.cpp
    M Source/JavaScriptCore/yarr/YarrInterpreter.cpp

  Log Message:
  -----------
  Cherry-pick e34edaa74575. rdar://problem/107856432

    [JSC] RegExpGlobalData::performMatch issue leading to OOB read
    https://bugs.webkit.org/show_bug.cgi?id=254930
    rdar://107436732

    Reviewed by Alexey Shvayka.

    Fixed two issues:
    1) In YarrInterpreter.cpp::matchAssertionBOL() we were advancing the string position for non-BMP
       characters.  Since it is an assertion, we shouldn't advance the character position.
       Made the same fix to matchAssertionEOL().
    2) In StringPrototype.cpp::replaceUsingRegExpSearch(), we need to advance past both elements of
       a non-BMP character for the case where the RegExp match is empty.

    * JSTests/stress/string-replace-regexp-matchBOL-correct-advancing.js: New test.
    * Source/JavaScriptCore/runtime/StringPrototype.cpp:
    (JSC::replaceUsingRegExpSearch):
    * Source/JavaScriptCore/yarr/YarrInterpreter.cpp:
    (JSC::Yarr::Interpreter::InputStream::readCheckedDontAdvance):
    (JSC::Yarr::Interpreter::matchAssertionBOL):
    (JSC::Yarr::Interpreter::matchAssertionEOL):

    Canonical link: https://commits.webkit.org/259548.551@safari-7615-branch

Canonical link: https://commits.webkit.org/259548.398@safari-7615.1.26.110-branch


  Commit: d83fba835bd4f51aff9ec14c8b08423d5acc05bf
      https://github.com/WebKit/WebKit/commit/d83fba835bd4f51aff9ec14c8b08423d5acc05bf
  Author: Russell Epstein <repstein at apple.com>
  Date:   2023-04-28 (Fri, 28 Apr 2023)

  Changed paths:
    M Configurations/Version.xcconfig

  Log Message:
  -----------
  Versioning

WebKit-7615.1.26.110.2

Canonical link: https://commits.webkit.org/259548.399@safari-7615.1.26.110-branch


Compare: https://github.com/WebKit/WebKit/compare/4ac633a7222f%5E...d83fba835bd4


More information about the webkit-changes mailing list