[Webkit-unassigned] [Bug 206018] New: TestController::platformLibraryPathForTesting() returns inner pointer to autoreleased NSString

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=206018

            Bug ID: 206018
           Summary: TestController::platformLibraryPathForTesting()
                    returns inner pointer to autoreleased NSString
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Tools / Tests
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: ddkilzer at webkit.org
                CC: darin at apple.com, joepeck at webkit.org

TestController::platformLibraryPathForTesting() returns inner pointer to autoreleased NSString.

This will result in a use-after-free if the const char* pointer is accessed after the NSString object has been released.

This is not currently crashing because WTR::TestController::TestController() leaks autoreleased objects into a top-level autoreleasePool that's never cleared (which was NOT fixed by Bug 205950).

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200109/de298fe5/attachment.htm>