[webkit-changes] [WebKit/WebKit] 122d57: Cherry-pick 277071 at main (3b4a4e93f160). https://bu...

[Pablo Saavedra Rodiño]

  Branch: refs/heads/webkitglib/2.44
  Home:   https://github.com/WebKit/WebKit
  Commit: 122d572253d0af64b89894e46f01922316eec990
      https://github.com/WebKit/WebKit/commit/122d572253d0af64b89894e46f01922316eec990
  Author: Pablo Saavedra <psaavedra at igalia.com>
  Date:   2024-04-09 (Tue, 09 Apr 2024)

  Changed paths:
    M Source/WebCore/platform/graphics/texmap/TextureMapperPlatformLayerProxyDMABuf.cpp

  Log Message:
  -----------
  Cherry-pick 277071 at main (3b4a4e93f160). https://bugs.webkit.org/show_bug.cgi?id=272150

    [WPE] Fix crash on ThreadedCompositor::renderLayerTree() during video playlist transitions
    https://bugs.webkit.org/show_bug.cgi?id=272150

    Reviewed by Miguel Gomez.

    Unnoticed default usage of dmabuf was leading to missing checks in the dmabuf
    proxy. This caused issues when activating a proxy in a TextureMapperLayer,
    removing any reference that another layer might have had to the previous proxy.
    Additionally, when invalidating, the reference to the proxy held by the TextureMapperLayer
    was also removed.

    This prevents an invalid memory access identified in the
    CoordinatedGraphicsScene::paintToCurrentGLContext().

    * Source/WebCore/platform/graphics/texmap/TextureMapperPlatformLayerProxyDMABuf.cpp:
    (WebCore::TextureMapperPlatformLayerProxyDMABuf::activateOnCompositingThread):
    (WebCore::TextureMapperPlatformLayerProxyDMABuf::invalidate):

    Canonical link: https://commits.webkit.org/277071@main



To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications