Branch: refs/heads/webkitglib/2.54
Home: https://github.com/WebKit/WebKit
Commit: 5f17ad47dbda8106f9ab44b7d359c528ef9c68f0
https://github.com/WebKit/WebKit/commit/5f17ad47dbda8106f9ab44b7d359c528ef9c68f0
Author: Justin Michaud <[email protected]>
Date: 2026-09-01 (Tue, 01 Sep 2026)
Changed paths:
A LayoutTests/fast/images/apng-hidden-first-frame-narrow-expected.txt
A LayoutTests/fast/images/apng-hidden-first-frame-narrow.html
A LayoutTests/fast/images/apng-hidden-first-frame-offset-expected.txt
A LayoutTests/fast/images/apng-hidden-first-frame-offset.html
A LayoutTests/fast/images/resources/apng-hidden-first-frame-narrow.png
A LayoutTests/fast/images/resources/apng-hidden-first-frame-offset.png
M Source/WebCore/platform/image-decoders/png/PNGImageDecoder.cpp
M Source/WebCore/platform/image-decoders/png/PNGImageDecoder.h
Log Message:
-----------
Cherry-pick 320270@main (56c0a88ac8c4).
https://bugs.webkit.org/show_bug.cgi?id=321753
[non-cocoa][fuzz] OOB read in APNG with hidden default image
https://bugs.webkit.org/show_bug.cgi?id=321753
Reviewed by Claudio Saavedra.
Simplify the lifecycle of the libpng callbacks so that we
don't confuse frames and read more pixels than we should.
Canonical link: https://commits.webkit.org/320270@main
Canonical link: https://commits.webkit.org/317695.177@webkitglib/2.54
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications