[Webkit-unassigned] [Bug 257982] New: REGRESSION(262585 at main): Potential null dereference of cached images in MemoryCache::destroyDecodedDataForAllImages()

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Jun 12 14:57:43 PDT 2023


https://bugs.webkit.org/show_bug.cgi?id=257982

            Bug ID: 257982
           Summary: REGRESSION(262585 at main): Potential null dereference of
                    cached images in
                    MemoryCache::destroyDecodedDataForAllImages()
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Images
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: sabouhallawa at apple.com
                CC: sabouhallawa at apple.com

When the WebProcess cleanup timer fires, MemoryCache may try to release the decoded data of an already deleted CachedImage. MemoryCache stores the list of cached resources as WeakPtrs. So we need to null check these WeakPtrs in forEachResource() before using them.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20230612/6da2b0a6/attachment-0001.htm>


More information about the webkit-unassigned mailing list