[webkit-changes] [WebKit/WebKit] 4ac633: Versioning.
Russell Epstein
noreply at github.com
Wed Oct 25 13:53:17 PDT 2023
Branch: refs/heads/safari-7615.1.26.110-branch
Home: https://github.com/WebKit/WebKit
Commit: 4ac633a7222fcdc7250cabd63f651f15e83ec24f
https://github.com/WebKit/WebKit/commit/4ac633a7222fcdc7250cabd63f651f15e83ec24f
Author: Russell Epstein <repstein at apple.com>
Date: 2023-03-31 (Fri, 31 Mar 2023)
Changed paths:
M Configurations/Version.xcconfig
Log Message:
-----------
Versioning.
WebKit-7615.1.26.11.23
Identifier: 259548.391 at safari-7615.1.26.11-branch
Commit: 1a04bf9ceb90a090e3f8e78c35ea2a06e62e4f72
https://github.com/WebKit/WebKit/commit/1a04bf9ceb90a090e3f8e78c35ea2a06e62e4f72
Author: Alex Christensen <achristensen at apple.com>
Date: 2023-03-31 (Fri, 31 Mar 2023)
Changed paths:
M Source/WebKit/GPUProcess/GPUConnectionToWebProcess.cpp
M Source/WebKit/GPUProcess/GPUConnectionToWebProcess.h
M Source/WebKit/GPUProcess/GPUProcess.cpp
M Source/WebKit/GPUProcess/GPUProcess.h
M Source/WebKit/GPUProcess/GPUProcess.messages.in
M Source/WebKit/Shared/GPUProcessConnectionParameters.h
M Source/WebKit/UIProcess/GPU/GPUProcessProxy.cpp
M Source/WebKit/UIProcess/GPU/GPUProcessProxy.h
M Source/WebKit/UIProcess/WebProcessPool.cpp
M Source/WebKit/UIProcess/WebProcessProxy.cpp
M Source/WebKit/UIProcess/WebProcessProxy.h
Log Message:
-----------
Cherry-pick 3891a934a192. rdar://problem/107153896
Verify WebGPU is enabled in GPUConnectionToWebProcess::createRemoteGPU
https://bugs.webkit.org/show_bug.cgi?id=254373
rdar://107153896
Reviewed by Myles C. Maxfield, Geoffrey Garen and Chris Dumez.
Have the GPUConnectionToWebProcess keep a boolean to keep track of whether
WebGPU is enabled for any Page in that process. Update the boolean when
adding or removing a Page. If we get a message to use the entry point of
WebGPU and WebGPU is disabled, then terminate the web content process
from which the message came instead of creating a RemoteGPU.
* Source/WebKit/GPUProcess/GPUConnectionToWebProcess.cpp:
(WebKit::m_webGPUEnabled):
(WebKit::GPUConnectionToWebProcess::createRemoteGPU):
(WebKit::m_routingArbitrator): Deleted.
* Source/WebKit/GPUProcess/GPUConnectionToWebProcess.h:
(WebKit::GPUConnectionToWebProcess::updateWebGPUEnabled):
* Source/WebKit/GPUProcess/GPUProcess.cpp:
(WebKit::GPUProcess::updateWebGPUEnabled):
* Source/WebKit/GPUProcess/GPUProcess.h:
* Source/WebKit/GPUProcess/GPUProcess.messages.in:
* Source/WebKit/Shared/GPUProcessConnectionParameters.h:
(WebKit::GPUProcessConnectionParameters::encode const):
(WebKit::GPUProcessConnectionParameters::decode):
* Source/WebKit/UIProcess/GPU/GPUProcessProxy.cpp:
(WebKit::GPUProcessProxy::updateWebGPUEnabled):
* Source/WebKit/UIProcess/GPU/GPUProcessProxy.h:
* Source/WebKit/UIProcess/WebProcessPool.cpp:
(WebKit::WebProcessPool::createGPUProcessConnection):
* Source/WebKit/UIProcess/WebProcessProxy.cpp:
(WebKit::WebProcessProxy::addExistingWebPage):
(WebKit::WebProcessProxy::removeWebPage):
(WebKit::WebProcessProxy::updateWebGPUEnabledStateInGPUProcess):
* Source/WebKit/UIProcess/WebProcessProxy.h:
Canonical link: https://commits.webkit.org/259548.478@safari-7615-branch
Identifier: 259548.392 at safari-7615.1.26.11-branch
Commit: 7a49b97bd9e59bfd547d8ae8ef135d6665216f17
https://github.com/WebKit/WebKit/commit/7a49b97bd9e59bfd547d8ae8ef135d6665216f17
Author: Youenn Fablet <youennf at gmail.com>
Date: 2023-03-31 (Fri, 31 Mar 2023)
Changed paths:
M Source/WebCore/platform/mediastream/mac/AVVideoCaptureSource.h
M Source/WebCore/platform/mediastream/mac/AVVideoCaptureSource.mm
Log Message:
-----------
Apply patch. rdar://problem/106142457
REGRESSION iOS 16.4 beta selects ultra-wide for facingMode: environment
https://bugs.webkit.org/show_bug.cgi?id=253186
rdar://problem/106142457
Reviewed by Jer Noble.
For ultra wide back cameras, add a zoomn factor of 2 so that a zoom of 1 corresponds to a standard FOV.
We compute this factor once and we then divide by this factor for capabilities and multiply by this factor for settings.
Manually tested on device.
* Source/WebCore/platform/mediastream/mac/AVVideoCaptureSource.h:
* Source/WebCore/platform/mediastream/mac/AVVideoCaptureSource.mm:
(WebCore::AVVideoCaptureSource::computeMinZoom const):
(WebCore::AVVideoCaptureSource::computeMaxZoom const):
(WebCore::cameraZoomScaleFactor):
(WebCore::AVVideoCaptureSource::AVVideoCaptureSource):
(WebCore::AVVideoCaptureSource::setFrameRateAndZoomWithPreset):
(WebCore::AVVideoCaptureSource::generatePresets):
(WebCore::computeMaxZoom): Deleted.
Canonical link: https://commits.webkit.org/261877@main
Identifier: 259548.393 at safari-7615.1.26.11-branch
Commit: ef3f9d54a355c4cca7532546c678b2f4f619f919
https://github.com/WebKit/WebKit/commit/ef3f9d54a355c4cca7532546c678b2f4f619f919
Author: Myah Cobbs <mcobbs at apple.com>
Date: 2023-03-31 (Fri, 31 Mar 2023)
Changed paths:
M Source/WebCore/platform/mediastream/mac/AVVideoCaptureSource.h
M Source/WebCore/platform/mediastream/mac/AVVideoCaptureSource.mm
Log Message:
-----------
Revert "Apply patch. rdar://problem/106142457"
This reverts commit 7a49b97bd9e59bfd547d8ae8ef135d6665216f17.
Identifier: 259548.394 at safari-7615.1.26.11-branch
Commit: 1039f0c3235ffd9a6584657adb34db10c562e4af
https://github.com/WebKit/WebKit/commit/1039f0c3235ffd9a6584657adb34db10c562e4af
Author: Mark Lam <mark.lam at apple.com>
Date: 2023-03-31 (Fri, 31 Mar 2023)
Changed paths:
M Source/JavaScriptCore/heap/Heap.cpp
M Source/JavaScriptCore/heap/Heap.h
M Source/JavaScriptCore/heap/HeapInlines.h
M Source/JavaScriptCore/runtime/ArgList.cpp
M Source/JavaScriptCore/runtime/ArgList.h
M Source/WebCore/Modules/webaudio/AudioWorkletProcessor.cpp
M Source/WebCore/Modules/webaudio/AudioWorkletProcessor.h
M Source/WebCore/bindings/js/SerializedScriptValue.cpp
Log Message:
-----------
Cherry-pick 2c49ff7b0481. rdar://problem/107369977
CloneDeserializer::deserialize() should store cell pointers in a MarkedVector.
https://bugs.webkit.org/show_bug.cgi?id=254797
rdar://107369977
Reviewed by Justin Michaud.
Previously, CloneDeserializer::deserialize() was storing pointers to newly created objects
in a few Vectors. This is problematic because the GC is not aware of Vectors, and cannot
scan them. In this patch, we refactor the MarkedArgumentBuffer class into a MarkedVector
template class that offer 2 enhancements:
1. It can be configured to store specific types of cell pointer types. This avoids us
having to constantly cast JSValues into these pointers.
2. It allows us to specify the type of OverflowHandler we want to use. In this case,
we want to use CrashOnOverflow. The previous MarkedArgumentBuffer always assumes
RecordOnOverflow. This allows us to avoid having to manually check for overflows,
or have to use appendWithCrashOnOverflow. For our current needs, MarkedVector can be
used as a drop in replacement for Vector.
And we fix the CloneDeserializer::deserialize() issue by replacing the use of Vectors
with MarkedVector instead.
* Source/JavaScriptCore/heap/Heap.cpp:
(JSC::Heap::addCoreConstraints):
* Source/JavaScriptCore/heap/Heap.h:
* Source/JavaScriptCore/heap/HeapInlines.h:
* Source/JavaScriptCore/runtime/ArgList.cpp:
(JSC::MarkedVectorBase::addMarkSet):
(JSC::MarkedVectorBase::markLists):
(JSC::MarkedVectorBase::slowEnsureCapacity):
(JSC::MarkedVectorBase::expandCapacity):
(JSC::MarkedVectorBase::slowAppend):
(JSC::MarkedArgumentBufferBase::addMarkSet): Deleted.
(JSC::MarkedArgumentBufferBase::markLists): Deleted.
(JSC::MarkedArgumentBufferBase::slowEnsureCapacity): Deleted.
(JSC::MarkedArgumentBufferBase::expandCapacity): Deleted.
(JSC::MarkedArgumentBufferBase::slowAppend): Deleted.
* Source/JavaScriptCore/runtime/ArgList.h:
(JSC::MarkedVectorWithSize::MarkedVectorWithSize):
(JSC::MarkedVectorWithSize::at const):
(JSC::MarkedVectorWithSize::clear):
(JSC::MarkedVectorWithSize::append):
(JSC::MarkedVectorWithSize::appendWithCrashOnOverflow):
(JSC::MarkedVectorWithSize::last const):
(JSC::MarkedVectorWithSize::takeLast):
(JSC::MarkedVectorWithSize::ensureCapacity):
(JSC::MarkedVectorWithSize::hasOverflowed):
(JSC::MarkedVectorWithSize::fill):
(JSC::MarkedArgumentBufferWithSize::MarkedArgumentBufferWithSize): Deleted.
* Source/WebCore/Modules/webaudio/AudioWorkletProcessor.cpp:
(WebCore::AudioWorkletProcessor::buildJSArguments):
* Source/WebCore/Modules/webaudio/AudioWorkletProcessor.h:
* Source/WebCore/bindings/js/SerializedScriptValue.cpp:
(WebCore::CloneDeserializer::deserialize):
Canonical link: https://commits.webkit.org/259548.530@safari-7615-branch
Identifier: 259548.395 at safari-7615.1.26.11-branch
Commit: 7cca9947b754ed63c6f82205f7aa06c4f35de833
https://github.com/WebKit/WebKit/commit/7cca9947b754ed63c6f82205f7aa06c4f35de833
Author: Russell Epstein <repstein at apple.com>
Date: 2023-04-10 (Mon, 10 Apr 2023)
Changed paths:
M Configurations/Version.xcconfig
Log Message:
-----------
Versioning.
WebKit-7615.1.26.110.1
Canonical link: https://commits.webkit.org/259548.396@safari-7615.1.26.110-branch
Commit: 3e2416828cb294b05abb578a2317d1be81cbaecd
https://github.com/WebKit/WebKit/commit/3e2416828cb294b05abb578a2317d1be81cbaecd
Author: Antoine Quint <graouts at webkit.org>
Date: 2023-04-10 (Mon, 10 Apr 2023)
Changed paths:
M Source/WebCore/animation/WebAnimation.cpp
Log Message:
-----------
Cherry-pick 1d6fe184ea53. rdar://problem/107856564
Potential use-after-free in WebAnimation::commitStyles
https://bugs.webkit.org/show_bug.cgi?id=254840
rdar://107444873
Reviewed by Dean Jackson and Darin Adler.
Ensure that the animation's effect and target are kept alive for the duration of this method
since it is possible that calling updateStyleIfNeeded() could call into JavaScript and thus
these two pointers could be changed to a null value using the Web Animations API.
* Source/WebCore/animation/WebAnimation.cpp:
(WebCore::WebAnimation::commitStyles):
Canonical link: https://commits.webkit.org/259548.532@safari-7615-branch
Canonical link: https://commits.webkit.org/259548.397@safari-7615.1.26.110-branch
Commit: 378e987add61c12b5367bdba0e8d52f3e0b347f7
https://github.com/WebKit/WebKit/commit/378e987add61c12b5367bdba0e8d52f3e0b347f7
Author: Michael Saboff <msaboff at apple.com>
Date: 2023-04-10 (Mon, 10 Apr 2023)
Changed paths:
A JSTests/stress/string-replace-regexp-matchBOL-correct-advancing.js
M Source/JavaScriptCore/runtime/StringPrototype.cpp
M Source/JavaScriptCore/yarr/YarrInterpreter.cpp
Log Message:
-----------
Cherry-pick e34edaa74575. rdar://problem/107856432
[JSC] RegExpGlobalData::performMatch issue leading to OOB read
https://bugs.webkit.org/show_bug.cgi?id=254930
rdar://107436732
Reviewed by Alexey Shvayka.
Fixed two issues:
1) In YarrInterpreter.cpp::matchAssertionBOL() we were advancing the string position for non-BMP
characters. Since it is an assertion, we shouldn't advance the character position.
Made the same fix to matchAssertionEOL().
2) In StringPrototype.cpp::replaceUsingRegExpSearch(), we need to advance past both elements of
a non-BMP character for the case where the RegExp match is empty.
* JSTests/stress/string-replace-regexp-matchBOL-correct-advancing.js: New test.
* Source/JavaScriptCore/runtime/StringPrototype.cpp:
(JSC::replaceUsingRegExpSearch):
* Source/JavaScriptCore/yarr/YarrInterpreter.cpp:
(JSC::Yarr::Interpreter::InputStream::readCheckedDontAdvance):
(JSC::Yarr::Interpreter::matchAssertionBOL):
(JSC::Yarr::Interpreter::matchAssertionEOL):
Canonical link: https://commits.webkit.org/259548.551@safari-7615-branch
Canonical link: https://commits.webkit.org/259548.398@safari-7615.1.26.110-branch
Commit: d83fba835bd4f51aff9ec14c8b08423d5acc05bf
https://github.com/WebKit/WebKit/commit/d83fba835bd4f51aff9ec14c8b08423d5acc05bf
Author: Russell Epstein <repstein at apple.com>
Date: 2023-04-28 (Fri, 28 Apr 2023)
Changed paths:
M Configurations/Version.xcconfig
Log Message:
-----------
Versioning
WebKit-7615.1.26.110.2
Canonical link: https://commits.webkit.org/259548.399@safari-7615.1.26.110-branch
Compare: https://github.com/WebKit/WebKit/compare/4ac633a7222f%5E...d83fba835bd4
More information about the webkit-changes
mailing list