[Webkit-unassigned] [Bug 239338] -Wuse-after-free warning when building RefCounter test with GCC 12

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu May 12 16:05:18 PDT 2022


https://bugs.webkit.org/show_bug.cgi?id=239338

--- Comment #4 from Michael Catanzaro <mcatanzaro at gnome.org> ---
I think we're fine:

// Testing (3g) - deref with callback from 1 -> 0 AFTER RefCounter has been destroyed.
deref: this=0x20cdd10
~Count this=0x20cdd10
// Testing (1b) - Construction without a callback.

The use after free would happen if ~Count were somehow destroyed before Count::deref is called. The opposite is happening. Seems good.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220512/df6fbe4b/attachment.htm>


More information about the webkit-unassigned mailing list