Use-after-move of Vector<ManipulationToken> in TextManipulationController::observeParagraphs(). This is not a security issue since the move constructor and the move assignment operator for WTF::Vector both do a swap(). This is to fix a clang static analyzer warning. void TextManipulationController::observeParagraphs(const Position& start, const Position& end) { [...] Vector<ManipulationToken> tokensInCurrentParagraph; [...] for (; !iterator.atEnd(); iterator.advance()) { [...] if (content.isReplacedContent) { [...] tokensInCurrentParagraph.append(ManipulationToken { m_tokenIdentifier.generate(), "[]", true /* isExcluded */}); continue; } [...] while ((offsetOfNextNewLine = currentText.find('\n', startOfCurrentLine)) != notFound) { if (startOfCurrentLine < offsetOfNextNewLine) { [...] tokensInCurrentParagraph.append(ManipulationToken { m_tokenIdentifier.generate(), stringUntilEndOfLine, exclusionRuleMatcher.isExcluded(content.node.get()) }); } if (!tokensInCurrentParagraph.isEmpty()) { [...] addItem(ManipulationItemData { startOfCurrentParagraph, endOfCurrentParagraph, nullptr, nullQName(), WTFMove(tokensInCurrentParagraph) }); [...] } [...] } [...] if (remainingText.length()) tokensInCurrentParagraph.append(ManipulationToken { m_tokenIdentifier.generate(), remainingText.toString(), exclusionRuleMatcher.isExcluded(content.node.get()) }); } if (!tokensInCurrentParagraph.isEmpty()) addItem(ManipulationItemData { startOfCurrentParagraph, visibleEnd.deepEquivalent(), nullptr, nullQName(), WTFMove(tokensInCurrentParagraph) }); }