Bug 272868

Summary: heap-use-after-free | WebCore::RenderLayer::updateLayerListsIfNeeded; WebCore::forEachElementInPaintOrder; WebCore::forEachElementInPaintOrder
Product: WebKit Reporter: Tim Nguyen (:ntim) <ntim>
Component: Layout and RenderingAssignee: Tim Nguyen (:ntim) <ntim>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, simon.fraser, webkit-bug-importer, zalan
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Bug Depends on:    
Bug Blocks: 259055    

Tim Nguyen (:ntim)
Reported 2024-04-17 17:46:31 PDT
rdar://126636219
Attachments
Add attachment proposed patch, testcase, etc.
Tim Nguyen (:ntim)
Comment 1 2024-04-17 17:52:31 PDT
Pull request: https://github.com/WebKit/WebKit/pull/27424
EWS
Comment 2 2024-04-20 03:19:40 PDT
Committed 277779@main (cd5d1b32f5a4): <https://commits.webkit.org/277779@main> Reviewed commits have been landed. Closing PR #27424 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.