[Webkit-unassigned] [Bug 184468] Crash in SchemeRegistry::registerURLSchemeAsLocal

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Apr 10 18:38:19 PDT 2018


https://bugs.webkit.org/show_bug.cgi?id=184468

--- Comment #2 from Michael Catanzaro <mcatanzaro at igalia.com> ---
It's easy to verify that both builtinLocalURLSchemes and localURLSchemes are never used except when guarded by schemeRegistryLock.

>From the backtrace, I see eolie is calling webkit_security_manager_register_uri_scheme_as_local() from the main thread at the time of the crash, which should be perfectly safe. And I see the scheme you're registering is scheme=0x563a63202c10 "file", so clearly nothing wrong with the memory you're passing in.

I notice the same String is being added to WebProcessPool::m_schemesToRegisterAsLocal by registerSecurityPolicyForURIScheme in WebKitSecurityManager.cpp. That should be perfectly safe, though.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20180411/d3eeb7e7/attachment-0002.html>


More information about the webkit-unassigned mailing list