[webkit-changes] [WebKit/WebKit] e5b7ac: Versioning.

[Yusuke Suzuki]

  Branch: refs/heads/safari-7620.2.4.14-branch
  Home:   https://github.com/WebKit/WebKit
  Commit: e5b7ac359e3b66ff5043730731f68a1a93c003a8
      https://github.com/WebKit/WebKit/commit/e5b7ac359e3b66ff5043730731f68a1a93c003a8
  Author: Mohsin Qureshi <mohsinq at apple.com>
  Date:   2024-12-17 (Tue, 17 Dec 2024)

  Changed paths:
    M Configurations/Version.xcconfig

  Log Message:
  -----------
  Versioning.

WebKit-7620.2.4.14.1

Canonical link: https://commits.webkit.org/283286.604@safari-7620.2.4.14-branch


  Commit: e11fd697c2b5853eba0a3674dc17b230d31dba8b
      https://github.com/WebKit/WebKit/commit/e11fd697c2b5853eba0a3674dc17b230d31dba8b
  Author: Mohsin Qureshi <mohsinq at apple.com>
  Date:   2025-01-07 (Tue, 07 Jan 2025)

  Changed paths:
    M Configurations/Version.xcconfig

  Log Message:
  -----------
  Versioning.

WebKit-7620.2.4.14.2

Canonical link: https://commits.webkit.org/283286.605@safari-7620.2.4.14-branch


  Commit: 367ec7c19c49beab2ba28049e388ade8dc102ac9
      https://github.com/WebKit/WebKit/commit/367ec7c19c49beab2ba28049e388ade8dc102ac9
  Author: Timothy Hatcher <timothy at apple.com>
  Date:   2025-01-07 (Tue, 07 Jan 2025)

  Changed paths:
    M Source/WebKit/UIProcess/Extensions/Cocoa/WebExtensionCocoa.mm
    M Source/WebKit/UIProcess/Extensions/Cocoa/WebExtensionDynamicScriptsCocoa.mm

  Log Message:
  -----------
  Cherry-pick 144dde143d3a. rdar://142452073

    Hang in +[NSString stringEncodingForData:encodingOptions:convertedString:usedLossyConversion:].
    https://webkit.org/b/285533
    rdar://142452073

    Reviewed by Brian Weinstein.

    Use WebCore::TextResourceDecoder instead of +[NSString stringEncodingForData:].
    Also cache the result so detection only happens once, and avoids disk access when
    an extension is executing the same script over and over in many tabs.

    * Source/WebKit/UIProcess/Extensions/Cocoa/WebExtensionCocoa.mm:
    (WebKit::WebExtension::resourceStringForPath): Use TextResourceDecoder.
    * Source/WebKit/UIProcess/Extensions/Cocoa/WebExtensionDynamicScriptsCocoa.mm:
    (WebKit::WebExtensionDynamicScripts::sourcePairForResource): Cache the result.

    Canonical link: https://commits.webkit.org/283286.606@safari-7620-branch


  Commit: 10bb9943bdf1bcb642e131e9a899b479f4f12b25
      https://github.com/WebKit/WebKit/commit/10bb9943bdf1bcb642e131e9a899b479f4f12b25
  Author: Mohsin Qureshi <mohsinq at apple.com>
  Date:   2025-01-08 (Wed, 08 Jan 2025)

  Changed paths:
    M Configurations/Version.xcconfig

  Log Message:
  -----------
  Versioning.

WebKit-7620.2.4.14.3

Canonical link: https://commits.webkit.org/283286.607@safari-7620.2.4.14-branch


  Commit: f207e51d88887d01df7401aaa40ba512acb39fe6
      https://github.com/WebKit/WebKit/commit/f207e51d88887d01df7401aaa40ba512acb39fe6
  Author: Sihui Liu <sihui_liu at apple.com>
  Date:   2025-01-08 (Wed, 08 Jan 2025)

  Changed paths:
    M Source/WTF/wtf/CrossThreadTask.h
    M Source/WTF/wtf/TypeTraits.h

  Log Message:
  -----------
  Cherry-pick 0a6d878611ce. rdar://142557914

    Web content process crash in WebCore::Event::~Event
    rdar://141997895

    Reviewed by Chris Dumez.

    rdar://139782420 made IDBDatabase subclass ThreadSafeRefCountedAndCanMakeThreadSafeWeakPtr. However,
    createCrossThreadTask() does not capture RefPtr for derived classes of ThreadSafeRefCountedAndCanMakeThreadSafeWeakPtr.
    To fix it, make sure createCrossThreadTask() creates RefPtr when ref() member function is available.

    * Source/WTF/wtf/CrossThreadTask.h:
    (WTF::createCrossThreadTask):
    * Source/WTF/wtf/TypeTraits.h:

    Canonical link: https://commits.webkit.org/283286.605@safari-7620-branch


  Commit: 30339d0d8ee49d2af25b2a4eb0641249f7316909
      https://github.com/WebKit/WebKit/commit/30339d0d8ee49d2af25b2a4eb0641249f7316909
  Author: Yusuke Suzuki <ysuzuki at apple.com>
  Date:   2025-01-08 (Wed, 08 Jan 2025)

  Changed paths:
    A JSTests/wasm/stress/array-element-creation.js
    A JSTests/wasm/stress/resources/array-element-creation.wasm
    M Source/JavaScriptCore/wasm/WasmOperations.cpp
    M Source/JavaScriptCore/wasm/WasmOperationsInlines.h
    M Source/JavaScriptCore/wasm/js/JSWebAssemblyArray.cpp
    M Source/JavaScriptCore/wasm/js/JSWebAssemblyArray.h
    M Source/JavaScriptCore/wasm/js/JSWebAssemblyInstance.cpp
    M Source/JavaScriptCore/wasm/js/JSWebAssemblyInstance.h

  Log Message:
  -----------
  Cherry-pick ac2bd207812a. rdar://141144921

    [JSC] WasmGC Array is broken for GC
    https://bugs.webkit.org/show_bug.cgi?id=285580
    rdar://141144921

    Reviewed by Keith Miller.

    WasmGC Array is broken for GC in multiple ways. We carefully reviewed WasmGC
    Array implementation. We found many issues, and this patch fixes them.

    1. Doing GC while putting GC values in FixedVector. That's totally
       wrong. We fixed it by first creating WasmGC Array and modifying the
       contents later.
    2. arrayNewElem is always creating I64 array, which is broken. We should
       create a specified typed array.
    3. WasmGC Array copy implementation is using std::copy even for
       overlapping region. That's totally wrong, and it should use memmove.
       For GC-ref-types, we should use gcSafeMemmove.

    * JSTests/wasm/stress/array-element-creation.js: Added.
    * JSTests/wasm/stress/resources/array-element-creation.wasm: Added.
    * Source/JavaScriptCore/wasm/WasmOperations.cpp:
    (JSC::Wasm::JSC_DEFINE_NOEXCEPT_JIT_OPERATION):
    * Source/JavaScriptCore/wasm/WasmOperationsInlines.h:
    (JSC::Wasm::fillArray):
    (JSC::Wasm::arrayNew):
    (JSC::Wasm::copyElementsInReverse):
    (JSC::Wasm::arrayNewFixed):
    (JSC::Wasm::createArrayFromDataSegment):
    (JSC::Wasm::arrayNewData):
    (JSC::Wasm::arrayNewElem):
    (JSC::Wasm::arrayInitElem):
    (JSC::Wasm::arrayInitData):
    (JSC::Wasm::createArrayValue): Deleted.
    (JSC::Wasm::createArrayFromElementSegment): Deleted.
    * Source/JavaScriptCore/wasm/js/JSWebAssemblyArray.cpp:
    (JSC::JSWebAssemblyArray::JSWebAssemblyArray):
    (JSC::JSWebAssemblyArray::fill):
    (JSC::JSWebAssemblyArray::copy):
    (JSC::JSWebAssemblyArray::visitChildrenImpl):
    * Source/JavaScriptCore/wasm/js/JSWebAssemblyArray.h:
    * Source/JavaScriptCore/wasm/js/JSWebAssemblyInstance.cpp:
    (JSC::JSWebAssemblyInstance::copyDataSegment):
    (JSC::JSWebAssemblyInstance::copyElementSegment):
    * Source/JavaScriptCore/wasm/js/JSWebAssemblyInstance.h:

    Canonical link: https://commits.webkit.org/283286.607@safari-7620-branch


Compare: https://github.com/WebKit/WebKit/compare/e5b7ac359e3b%5E...30339d0d8ee4

To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications