Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 479f2b4542deea74b5626f1dfb79451a614963e5
https://github.com/WebKit/WebKit/commit/479f2b4542deea74b5626f1dfb79451a614963e5
Author: Chris Dumez <[email protected]>
Date: 2026-05-26 (Tue, 26 May 2026)
Changed paths:
M Source/WebKit/NetworkProcess/NetworkConnectionToWebProcess.cpp
Log Message:
-----------
RELEASE_ASSERT in NetworkConnectionToWebProcess::scheduleResourceLoad() can
be abused
https://bugs.webkit.org/show_bug.cgi?id=310068
rdar://172058188
Reviewed by Ryosuke Niwa and Per Arne Vollan.
Use a MESSAGE_CHECK instead of a RELEASE_ASSERT() to crash the compromised
WebContent instead of the network process.
* Source/WebKit/NetworkProcess/NetworkConnectionToWebProcess.cpp:
(WebKit::NetworkConnectionToWebProcess::scheduleResourceLoad):
Originally-landed-as: 305413.509@rapid/safari-7624.2.5.110-branch
(246f60f4724f). rdar://176061591
Canonical link: https://commits.webkit.org/313945@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
