218239 2020-10-27 09:15:48 -0700 [GStreamer] Bad handling of audio files in the ImageDecoder 2020-11-02 13:01:45 -0800 1 1 1 Unclassified WebKit Platform WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 pnormand pnormand aperez calvaris cgarcia ews-watchlist gustavo menard vjaquez vulndiscovery webkit-bug-importer oldest_to_newest 1701903 0 pnormand 2020-10-27 09:15:48 -0700 Loading an mp3 in an <img> tag triggers unintended behavior. 1701908 1 412429 pnormand 2020-10-27 09:25:28 -0700 Created attachment 412429 Patch 1701980 2 ews-feeder 2020-10-27 10:58:45 -0700 Committed r269055: <https://trac.webkit.org/changeset/269055> All reviewed patches have been landed. Closing bug and clearing flags on attachment 412429. 1701982 3 webkit-bug-importer 2020-10-27 10:59:19 -0700 <rdar://problem/70729559> 1703656 4 aperez 2020-11-02 13:01:45 -0800 *** Bug 218449 has been marked as a duplicate of this bug. *** 412429 2020-10-27 09:25:28 -0700 2020-10-27 10:58:46 -0700 Patch bug-218239-20201027092527.patch text/plain 4479 pnormand U3VidmVyc2lvbiBSZXZpc2lvbjogMjY5MDM4CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggM2YyMjc0NDI3YzAyZjA3 OTllOGVlNjJmMGEwMGI3N2RkYmVjODZkZC4uMGQ0NDUzNmRmNWNmNzg0ZTNkMTNhMGRkNjY1MWRi NWZkOTgxZWNkMCAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDE4IEBACisyMDIwLTEwLTI3ICBQaGls aXBwZSBOb3JtYW5kICA8cG5vcm1hbmRAaWdhbGlhLmNvbT4KKworICAgICAgICBbR1N0cmVhbWVy XSBCYWQgaGFuZGxpbmcgb2YgYXVkaW8gZmlsZXMgaW4gdGhlIEltYWdlRGVjb2RlcgorICAgICAg ICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MjE4MjM5CisKKyAgICAg ICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgVGhlIGZpbmFsIG1haW4g dGhyZWFkIG5vdGlmaWNhdGlvbiBuZWVkcyB0byBiZSBibG9ja2luZyBvdGhlcndpc2UgdGhlIGRl Y29kZXIgbWlnaHQgZ2V0CisgICAgICAgIGRpc3Bvc2VkIG9mIHRvbyBlYXJseS4KKworICAgICAg ICBUZXN0OiBmYXN0L2ltYWdlcy9hbmltYXRlZC1pbWFnZS1tcDMtY3Jhc2guaHRtbAorCisgICAg ICAgICogcGxhdGZvcm0vZ3JhcGhpY3MvZ3N0cmVhbWVyL0ltYWdlRGVjb2RlckdTdHJlYW1lci5j cHA6CisgICAgICAgIChXZWJDb3JlOjpJbWFnZURlY29kZXJHU3RyZWFtZXI6OnB1c2hFbmNvZGVk RGF0YSk6CisKIDIwMjAtMTAtMjcgIEFudHRpIEtvaXZpc3RvICA8YW50dGlAYXBwbGUuY29tPgog CiAgICAgICAgIEFzc2VydCBpbiBCb3hUcmVlOjpsYXlvdXRCb3hGb3JSZW5kZXJlcigpIHVuZGVy IFJlbmRlckxheWVyOjp1cGRhdGVTY3JvbGxDb3JuZXJTdHlsZSgpCmRpZmYgLS1naXQgYS9Tb3Vy Y2UvV2ViQ29yZS9wbGF0Zm9ybS9ncmFwaGljcy9nc3RyZWFtZXIvSW1hZ2VEZWNvZGVyR1N0cmVh bWVyLmNwcCBiL1NvdXJjZS9XZWJDb3JlL3BsYXRmb3JtL2dyYXBoaWNzL2dzdHJlYW1lci9JbWFn ZURlY29kZXJHU3RyZWFtZXIuY3BwCmluZGV4IDkwN2MyYzU5MjA2MjkwY2U0YjkzMWU1ZjAwZjVi MmI2M2I5NDRkZTMuLjkwZjhjNDlhNWJkZDhhMGVlZTU4Yzc3NzBjOTE5ZjNlY2M5YzVhNTQgMTAw NjQ0Ci0tLSBhL1NvdXJjZS9XZWJDb3JlL3BsYXRmb3JtL2dyYXBoaWNzL2dzdHJlYW1lci9JbWFn ZURlY29kZXJHU3RyZWFtZXIuY3BwCisrKyBiL1NvdXJjZS9XZWJDb3JlL3BsYXRmb3JtL2dyYXBo aWNzL2dzdHJlYW1lci9JbWFnZURlY29kZXJHU3RyZWFtZXIuY3BwCkBAIC00MDQsNyArNDA0LDcg QEAgdm9pZCBJbWFnZURlY29kZXJHU3RyZWFtZXI6OnB1c2hFbmNvZGVkRGF0YShjb25zdCBTaGFy ZWRCdWZmZXImIGJ1ZmZlcikKICAgICAgICAgfQogICAgIH0KICAgICBtX2lubmVyRGVjb2RlciA9 IG51bGxwdHI7Ci0gICAgY2FsbE9uTWFpblRocmVhZChbdGhpc10geworICAgIGNhbGxPbk1haW5U aHJlYWRBbmRXYWl0KFsmXSB7CiAgICAgICAgIGlmIChtX2VuY29kZWREYXRhU3RhdHVzQ2hhbmdl ZENhbGxiYWNrKQogICAgICAgICAgICAgbV9lbmNvZGVkRGF0YVN0YXR1c0NoYW5nZWRDYWxsYmFj ayhlbmNvZGVkRGF0YVN0YXR1cygpKTsKICAgICB9KTsKZGlmZiAtLWdpdCBhL0xheW91dFRlc3Rz L0NoYW5nZUxvZyBiL0xheW91dFRlc3RzL0NoYW5nZUxvZwppbmRleCA0YTIwNmViNmI0OGE1N2Nl OTg1MThmM2UwYjlhYTk4NmQ2YjYxNTgyLi43MDE2NjZkNDc1MzNmNzkxNTM2MGQ1NDJmOGE3Mzlj ZTk2MTNlMzA1IDEwMDY0NAotLS0gYS9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cKKysrIGIvTGF5b3V0 VGVzdHMvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTMgQEAKKzIwMjAtMTAtMjcgIFBoaWxpcHBlIE5v cm1hbmQgIDxwbm9ybWFuZEBpZ2FsaWEuY29tPgorCisgICAgICAgIFtHU3RyZWFtZXJdIEJhZCBo YW5kbGluZyBvZiBhdWRpbyBmaWxlcyBpbiB0aGUgSW1hZ2VEZWNvZGVyCisgICAgICAgIGh0dHBz Oi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0yMTgyMzkKKworICAgICAgICBSZXZp ZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICAqIGZhc3QvaW1hZ2VzL2FuaW1hdGVk LWltYWdlLW1wMy1jcmFzaC1leHBlY3RlZC50eHQ6IEFkZGVkLgorICAgICAgICAqIGZhc3QvaW1h Z2VzL2FuaW1hdGVkLWltYWdlLW1wMy1jcmFzaC5odG1sOiBBZGRlZC4KKwogMjAyMC0xMC0yNyAg WmFsYW4gQnVqdGFzICA8emFsYW5AYXBwbGUuY29tPgogCiAgICAgICAgIFJlbW92ZSB1bm5lZWRl ZCB3aGl0ZXNwYWNlIGJldHdlZW4gY29udGVudCBhbmQgPGJyPgpkaWZmIC0tZ2l0IGEvTGF5b3V0 VGVzdHMvZmFzdC9pbWFnZXMvYW5pbWF0ZWQtaW1hZ2UtbXAzLWNyYXNoLWV4cGVjdGVkLnR4dCBi L0xheW91dFRlc3RzL2Zhc3QvaW1hZ2VzL2FuaW1hdGVkLWltYWdlLW1wMy1jcmFzaC1leHBlY3Rl ZC50eHQKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMC4uZmY2NWZiZjQ2NTE2ZDA4ZWM5ZmE2NGQ2ZDQ2MTU5MWE3ZDJlMGIx NgotLS0gL2Rldi9udWxsCisrKyBiL0xheW91dFRlc3RzL2Zhc3QvaW1hZ2VzL2FuaW1hdGVkLWlt YWdlLW1wMy1jcmFzaC1leHBlY3RlZC50eHQKQEAgLTAsMCArMSwxMCBAQAorVGVzdCB0aGF0IGEg bXAzIG1lZGlhIGZpbGUgbG9hZGVkIGFzIGFuIGltYWdlIHNob3VsZCBub3QgY3Jhc2guCisKK09u IHN1Y2Nlc3MsIHlvdSB3aWxsIHNlZSBhIHNlcmllcyBvZiAiUEFTUyIgbWVzc2FnZXMsIGZvbGxv d2VkIGJ5ICJURVNUIENPTVBMRVRFIi4KKworCitQQVNTIERlY29kaW5nIGFuIG1wMyBmaWxlIHRy aWdnZXJzIG5vIGNyYXNoCitQQVNTIHN1Y2Nlc3NmdWxseVBhcnNlZCBpcyB0cnVlCisKK1RFU1Qg Q09NUExFVEUKKwpkaWZmIC0tZ2l0IGEvTGF5b3V0VGVzdHMvZmFzdC9pbWFnZXMvYW5pbWF0ZWQt aW1hZ2UtbXAzLWNyYXNoLmh0bWwgYi9MYXlvdXRUZXN0cy9mYXN0L2ltYWdlcy9hbmltYXRlZC1p bWFnZS1tcDMtY3Jhc2guaHRtbApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwLi5mMzZmNjY2Mjg3ZWVlYWY3Zjc3NzBhNjY3 NDQ0MjFkZTI2MTk4MTk3Ci0tLSAvZGV2L251bGwKKysrIGIvTGF5b3V0VGVzdHMvZmFzdC9pbWFn ZXMvYW5pbWF0ZWQtaW1hZ2UtbXAzLWNyYXNoLmh0bWwKQEAgLTAsMCArMSwzNSBAQAorPCFET0NU WVBFIGh0bWw+Cis8aHRtbD4KKyAgICA8Ym9keT4KKyAgICAgICAgPGltZz4KKyAgICAgICAgPHNj cmlwdCBzcmM9Ii4uLy4uL3Jlc291cmNlcy9qcy10ZXN0LXByZS5qcyI+PC9zY3JpcHQ+CisgICAg ICAgIDxzY3JpcHQ+CisgICAgICAgICB3aW5kb3cuanNUZXN0SXNBc3luYyA9IHRydWU7CisKKyAg ICAgICAgIGZ1bmN0aW9uIGxvYWRJbWFnZShzcmMpIHsKKyAgICAgICAgICAgICByZXR1cm4gbmV3 IFByb21pc2UoKHJlc29sdmUsIHJlamVjdCkgPT4geworICAgICAgICAgICAgICAgICBjb25zdCBp bWFnZSA9IGRvY3VtZW50LnF1ZXJ5U2VsZWN0b3IoJ2ltZycpOworICAgICAgICAgICAgICAgICBp bWFnZS5zcmMgPSBzcmM7CisgICAgICAgICAgICAgICAgIHJldHVybiBpbWFnZS5kZWNvZGUoKS50 aGVuKCgpID0+IHsgcmVzb2x2ZShpbWFnZSk7IH0pLmNhdGNoKChlcnJvcikgPT4geyByZWplY3Qo ZXJyb3IpOyB9KTsKKyAgICAgICAgICAgICB9KTsKKyAgICAgICAgIH0KKworICAgICAgICAgZnVu Y3Rpb24gZW5kVGVzdCgpIHsKKyAgICAgICAgICAgICBmaW5pc2hKU1Rlc3QoKTsKKyAgICAgICAg ICAgICBpZiAod2luZG93LnRlc3RSdW5uZXIpCisgICAgICAgICAgICAgICAgIHRlc3RSdW5uZXIu bm90aWZ5RG9uZSgpOworICAgICAgICAgfQorCisgICAgICAgICBkZXNjcmlwdGlvbignVGVzdCB0 aGF0IGEgbXAzIG1lZGlhIGZpbGUgbG9hZGVkIGFzIGFuIGltYWdlIHNob3VsZCBub3QgY3Jhc2gu JykKKworICAgICAgICAgbG9hZEltYWdlKCIuLi8uLi9tZWRpYS9jb250ZW50L3NpbGVuY2UubXAz IikudGhlbihpbWFnZSA9PiB7CisgICAgICAgICAgICAgdGVzdEZhaWxlZCgiRGVjb2RpbmcgYW4g bXAzIGZpbGUgdG8gYW4gPGltZz4gaXMgbm90IGV4cGVjdGVkIHRvIHdvcmsiKTsKKyAgICAgICAg ICAgICBlbmRUZXN0KCk7CisgICAgICAgICB9KS5jYXRjaCgoZXJyb3IpID0+IHsKKyAgICAgICAg ICAgICB0ZXN0UGFzc2VkKCJEZWNvZGluZyBhbiBtcDMgZmlsZSB0cmlnZ2VycyBubyBjcmFzaCIp OworICAgICAgICAgICAgIGVuZFRlc3QoKTsKKyAgICAgICAgIH0pOworICAgICAgICA8L3Njcmlw dD4KKyAgICAgICAgPHNjcmlwdCBzcmM9Ii4uLy4uL3Jlc291cmNlcy9qcy10ZXN0LXBvc3QuanMi Pjwvc2NyaXB0PgorICAgIDwvYm9keT4KKzwvaHRtbD4K