[webkit-changes] [WebKit/WebKit] 419844: Detached buffer in VideoDecoderConfig "description...

[Commit Queue]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 41984419407f73335a3e59acaa63fca123b58082
      https://github.com/WebKit/WebKit/commit/41984419407f73335a3e59acaa63fca123b58082
  Author: Pedro Varangot <pvarangot at apple.com>
  Date:   2024-10-28 (Mon, 28 Oct 2024)

  Changed paths:
    A LayoutTests/http/wpt/webcodecs/videodecoderconfig-detached-description-expected.txt
    A LayoutTests/http/wpt/webcodecs/videodecoderconfig-detached-description.html
    M Source/WebCore/Modules/webcodecs/WebCodecsVideoDecoder.cpp

  Log Message:
  -----------
  Detached buffer in VideoDecoderConfig "description" leads to null pointer dereference if codec is invalid
https://bugs.webkit.org/show_bug.cgi?id=282021
rdar://137177069

Reviewed by Eric Carlson.

Check that description is not detached when we check if the config is valid or not, and error out before we check the coded if it's detached

* Source/WebCore/Modules/webcodecs/WebCodecsVideoDecoder.cpp:
(WebCore::isValidDecoderConfig):
* LayoutTests/http/wpt/webcodecs/videodecoderconfig-detached-description-expected.txt: Added.
* LayoutTests/http/wpt/webcodecs/videodecoderconfig-detached-description.html: Added.

Canonical link: https://commits.webkit.org/285772@main



To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications