192941 2018-12-20 11:15:13 -0800 REGRESSION (r239419): heap-use-after-free in AudioSourceProviderAVFObjC::finalizeCallback() 2018-12-20 11:48:43 -0800 1 1 1 Unclassified WebKit New Bugs WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 jer.noble jer.noble bfulgham commit-queue ews-watchlist ryanhaddad webkit-bug-importer oldest_to_newest 1489947 0 jer.noble 2018-12-20 11:15:13 -0800 REGRESSION (r239419): heap-use-after-free in AudioSourceProviderAVFObjC::finalizeCallback() 1489948 1 jer.noble 2018-12-20 11:15:40 -0800 <rdar://problem/46874096> 1489949 2 357836 jer.noble 2018-12-20 11:18:22 -0800 Created attachment 357836 Patch 1489953 3 ews-watchlist 2018-12-20 11:20:41 -0800 Attachment 357836 did not pass style-queue: ERROR: Source/WebCore/ChangeLog:3: Please consider whether the use of security-sensitive phrasing could help someone exploit WebKit: use-after-free [changelog/unwantedsecurityterms] [3] Total errors found: 1 in 2 files If any of these errors are false positives, please file a bug against check-webkit-style. 1489954 4 357836 bfulgham 2018-12-20 11:21:32 -0800 Comment on attachment 357836 Patch r=me. Lifetimes FTW! 1489974 5 357836 commit-queue 2018-12-20 11:48:42 -0800 Comment on attachment 357836 Patch Clearing flags on attachment: 357836 Committed r239458: <https://trac.webkit.org/changeset/239458> 1489975 6 commit-queue 2018-12-20 11:48:43 -0800 All reviewed patches have been landed. Closing bug. 357836 2018-12-20 11:18:22 -0800 2018-12-20 11:48:42 -0800 Patch bug-192941-20181220111821.patch text/plain 1853 jer.noble U3VidmVyc2lvbiBSZXZpc2lvbjogMjM4OTA3CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggMjljMzIxNjIwM2ZiMWRh OTgzNTdiNGFiMTYxNzAwZjljN2ExOWI2MC4uNjJkMzlmZjEyZTMyODAwMDhjNDQxNjE1ZGMwYWQ2 N2VhZjU5M2QwYSAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDE2IEBACisyMDE4LTEyLTIwICBKZXIg Tm9ibGUgIDxqZXIubm9ibGVAYXBwbGUuY29tPgorCisgICAgICAgIFJFR1JFU1NJT04gKHIyMzk0 MTkpOiBoZWFwLXVzZS1hZnRlci1mcmVlIGluIEF1ZGlvU291cmNlUHJvdmlkZXJBVkZPYmpDOjpm aW5hbGl6ZUNhbGxiYWNrKCkKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19i dWcuY2dpP2lkPTE5Mjk0MQorICAgICAgICA8cmRhcjovL3Byb2JsZW0vNDY4NzQwOTY+CisKKyAg ICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgRG9uJ3QgZGVsZXRl IHRoZSBsb2NrZWQgbG9jayBiZWZvcmUgdW5sb2NraW5nIHRoZSBsb2NrLiAKKworICAgICAgICAq IHBsYXRmb3JtL2dyYXBoaWNzL2F2Zm91bmRhdGlvbi9BdWRpb1NvdXJjZVByb3ZpZGVyQVZGT2Jq Qy5tbToKKyAgICAgICAgKFdlYkNvcmU6OkF1ZGlvU291cmNlUHJvdmlkZXJBVkZPYmpDOjpmaW5h bGl6ZUNhbGxiYWNrKToKKwogMjAxOC0xMi0xOSAgSmVyIE5vYmxlICA8amVyLm5vYmxlQGFwcGxl LmNvbT4KIAogICAgICAgICBMZWFrIG9mIE1UQXVkaW9Qcm9jZXNzaW5nVGFwICgzMDQgYnl0ZXMp IGluIGNvbS5hcHBsZS5XZWJLaXQuV2ViQ29udGVudCBydW5uaW5nIFdlYktpdCBsYXlvdXQgdGVz dHMKZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL3BsYXRmb3JtL2dyYXBoaWNzL2F2Zm91bmRh dGlvbi9BdWRpb1NvdXJjZVByb3ZpZGVyQVZGT2JqQy5tbSBiL1NvdXJjZS9XZWJDb3JlL3BsYXRm b3JtL2dyYXBoaWNzL2F2Zm91bmRhdGlvbi9BdWRpb1NvdXJjZVByb3ZpZGVyQVZGT2JqQy5tbQpp bmRleCA0ODFlYTM2OGU5ODAzNjQxZTliNTU3OTg3ZGI5NWNiZjRjNDkwYzgwLi4xNWI2YjkzYzA3 ZDcwNjA4ZGY2MGQ2MDcwYzFkYjVlNzI0OTc3ZTc3IDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViQ29y ZS9wbGF0Zm9ybS9ncmFwaGljcy9hdmZvdW5kYXRpb24vQXVkaW9Tb3VyY2VQcm92aWRlckFWRk9i akMubW0KKysrIGIvU291cmNlL1dlYkNvcmUvcGxhdGZvcm0vZ3JhcGhpY3MvYXZmb3VuZGF0aW9u L0F1ZGlvU291cmNlUHJvdmlkZXJBVkZPYmpDLm1tCkBAIC0yNDgsMTAgKzI0OCwxMSBAQCB2b2lk IEF1ZGlvU291cmNlUHJvdmlkZXJBVkZPYmpDOjpmaW5hbGl6ZUNhbGxiYWNrKE1UQXVkaW9Qcm9j ZXNzaW5nVGFwUmVmIHRhcCkKICAgICBBU1NFUlQodGFwKTsKICAgICBUYXBTdG9yYWdlKiB0YXBT dG9yYWdlID0gc3RhdGljX2Nhc3Q8VGFwU3RvcmFnZSo+KE1UQXVkaW9Qcm9jZXNzaW5nVGFwR2V0 U3RvcmFnZSh0YXApKTsKIAotICAgIHN0ZDo6bG9ja19ndWFyZDxMb2NrPiBsb2NrKHRhcFN0b3Jh Z2UtPm11dGV4KTsKLQotICAgIGlmICh0YXBTdG9yYWdlLT5fdGhpcykKLSAgICAgICAgdGFwU3Rv cmFnZS0+X3RoaXMtPmZpbmFsaXplKCk7CisgICAgeworICAgICAgICBzdGQ6OmxvY2tfZ3VhcmQ8 TG9jaz4gbG9jayh0YXBTdG9yYWdlLT5tdXRleCk7CisgICAgICAgIGlmICh0YXBTdG9yYWdlLT5f dGhpcykKKyAgICAgICAgICAgIHRhcFN0b3JhZ2UtPl90aGlzLT5maW5hbGl6ZSgpOworICAgIH0K ICAgICBkZWxldGUgdGFwU3RvcmFnZTsKIH0KIAo=