Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: df5079b55ea02b8d3a350570af1037cbc506cadc
https://github.com/WebKit/WebKit/commit/df5079b55ea02b8d3a350570af1037cbc506cadc
Author: Anne van Kesteren <[email protected]>
Date: 2026-10-12 (Mon, 12 Oct 2026)
Changed paths:
M Source/WebCore/bindings/js/SerializedScriptValue.cpp
M Tools/TestWebKitAPI/Tests/WebCore/SerializedScriptValue.cpp
Log Message:
-----------
Let every serialization tag reach its reader in JSIDBSerializationGlobalObject
https://bugs.webkit.org/show_bug.cgi?id=327010
rdar://189633572
Reviewed by Ryosuke Niwa.
JSIDBSerializationGlobalObject is no longer used by IndexedDB since
291234@main. Its remaining users are the SerializedScriptValue
deserialization fuzzer and its TestWebKitAPI regression tests, through
callOnIDBSerializationThreadAndWait().
It is a JSDOMGlobalObject with a script execution context, but it does
not match any [Exposed] global. As serialization tags moved to
isInterfaceExposedInGlobalObject(), in 322979@main through 323229@main,
it started rejecting them there before their readers run, so the fuzzer
no longer reaches most of the readers for platform objects. Exempt it, as
for global objects that are not JSDOMGlobalObjects. It already cannot
create platform objects, so this only restores what the fuzzer covered.
No change in behavior for web content.
Test: Tools/TestWebKitAPI/Tests/WebCore/SerializedScriptValue.cpp
Canonical link: https://commits.webkit.org/323537@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
