[Webkit-unassigned] [Bug 28149] New: Ensure embedders can't crash WebKit by updating visited links before Page creation

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=28149

           Summary: Ensure embedders can't crash WebKit by updating
                    visited links before Page creation
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Keywords: InChromiumBugs
          Severity: Normal
          Priority: P2
         Component: WebCore Misc.
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: dglazkov at chromium.org
                CC: darin at apple.com


I discovered this while troubleshooting a crash on Chromium, but it seems like
it may be applicable to other ports. Depending on how visited link state is
managed, the embedder may not be aware that a Page constructor has never been
called and invoke visited state change methods prematurely. The logical way to
handle this is to exit early (since there's no pages, there's nothing to
update).

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.