<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>228931</bug_id>
          
          <creation_ts>2021-08-09 16:11:25 -0700</creation_ts>
          <short_desc>CallFrame::returnPC should untag the return address before passing it to ReturnAddressPtr</short_desc>
          <delta_ts>2021-08-10 11:53:30 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>New Bugs</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Keith Miller">keith_miller</reporter>
          <assigned_to name="Keith Miller">keith_miller</assigned_to>
          <cc>benjamin</cc>
    
    <cc>cdumez</cc>
    
    <cc>cmarcelo</cc>
    
    <cc>ews-watchlist</cc>
    
    <cc>mark.lam</cc>
    
    <cc>msaboff</cc>
    
    <cc>saam</cc>
    
    <cc>tzagallo</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1783013</commentid>
    <comment_count>0</comment_count>
    <who name="Keith Miller">keith_miller</who>
    <bug_when>2021-08-09 16:11:25 -0700</bug_when>
    <thetext>CallFrame::returnPC should untag the return address before passing it to ReturnAddressPtr</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1783180</commentid>
    <comment_count>1</comment_count>
      <attachid>435263</attachid>
    <who name="Keith Miller">keith_miller</who>
    <bug_when>2021-08-10 09:00:19 -0700</bug_when>
    <thetext>Created attachment 435263
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1783189</commentid>
    <comment_count>2</comment_count>
      <attachid>435263</attachid>
    <who name="Mark Lam">mark.lam</who>
    <bug_when>2021-08-10 09:32:44 -0700</bug_when>
    <thetext>Comment on attachment 435263
Patch

r=me</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1783227</commentid>
    <comment_count>3</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2021-08-10 11:17:24 -0700</bug_when>
    <thetext>Committed r280858 (240399@main): &lt;https://commits.webkit.org/240399@main&gt;

All reviewed patches have been landed. Closing bug and clearing flags on attachment 435263.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1783236</commentid>
    <comment_count>4</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2021-08-10 11:43:25 -0700</bug_when>
    <thetext>&lt;rdar://problem/81753928&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>435263</attachid>
            <date>2021-08-10 09:00:19 -0700</date>
            <delta_ts>2021-08-10 11:53:30 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-228931-20210810120018.patch</filename>
            <type>text/plain</type>
            <size>6280</size>
            <attacher name="Keith Miller">keith_miller</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjgwNzg0CmRpZmYgLS1naXQgYS9Tb3VyY2UvSmF2YVNjcmlw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</data>
<flag name="commit-queue"
          id="458023"
          type_id="3"
          status="-"
          setter="ews-feeder"
    />
          </attachment>
      

    </bug>

</bugzilla>