229121 2021-08-15 08:38:08 -0700 -[WebView initWithCoder:] should use -[NSCoder decodeValueOfObjCType:at:size:] 2021-08-16 07:45:20 -0700 1 1 1 Unclassified WebKit WebKit Misc. WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED https://bugs.webkit.org/show_bug.cgi?id=210621 InRadar P2 Normal --- 1 ddkilzer ddkilzer andersca webkit-bug-importer oldest_to_newest 1784380 0 ddkilzer 2021-08-15 08:38:08 -0700 -[WebView initWithCoder:] should use -[NSCoder decodeValueOfObjCType:at:size:]. Found by clang static analyzer: Deprecated method '-decodeValueOfObjCType:at:' is insecure as it can lead to potential buffer overflows. Use the safer '-decodeValueOfObjCType:at:size:' method 1784381 1 webkit-bug-importer 2021-08-15 08:39:28 -0700 <rdar://problem/81956163> 1784382 2 435565 ddkilzer 2021-08-15 08:40:41 -0700 Created attachment 435565 Patch v1 1784496 3 ews-feeder 2021-08-16 07:45:19 -0700 Committed r281081 (240541@main): <https://commits.webkit.org/240541@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 435565. 435565 2021-08-15 08:40:41 -0700 2021-08-16 07:45:19 -0700 Patch v1 bug-229121-20210815084041.patch text/plain 1638 ddkilzer U3VidmVyc2lvbiBSZXZpc2lvbjogMjgwMDIwCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0TGVn YWN5L21hYy9DaGFuZ2VMb2cgYi9Tb3VyY2UvV2ViS2l0TGVnYWN5L21hYy9DaGFuZ2VMb2cKaW5k ZXggNTNkYzA5Mjk1ZWQ4OTIyNWNkODVhNmUxY2NkZWJlM2IwYjgzNzliMC4uZjdjZWVkOTQxNTVm ZDZlMGUxYWM1MmI3MDk4OGQ5OTI0NTViZGQ2NiAxMDA2NDQKLS0tIGEvU291cmNlL1dlYktpdExl Z2FjeS9tYWMvQ2hhbmdlTG9nCisrKyBiL1NvdXJjZS9XZWJLaXRMZWdhY3kvbWFjL0NoYW5nZUxv ZwpAQCAtMSwzICsxLDE1IEBACisyMDIxLTA4LTE1ICBEYXZpZCBLaWx6ZXIgIDxkZGtpbHplckBh cHBsZS5jb20+CisKKyAgICAgICAgLVtXZWJWaWV3IGluaXRXaXRoQ29kZXI6XSBzaG91bGQgdXNl IC1bTlNDb2RlciBkZWNvZGVWYWx1ZU9mT2JqQ1R5cGU6YXQ6c2l6ZTpdCisgICAgICAgIDxodHRw czovL3dlYmtpdC5vcmcvYi8yMjkxMjE+CisgICAgICAgIDxyZGFyOi8vcHJvYmxlbS84MTk1NjE2 Mz4KKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICAqIFdl YlZpZXcvV2ViVmlldy5tbToKKyAgICAgICAgKC1bV2ViVmlldyBpbml0V2l0aENvZGVyOl0pOgor ICAgICAgICAtIFN3aXRjaCB0byAtW05TQ29kZXIgZGVjb2RlVmFsdWVPZk9iakNUeXBlOmF0OnNp emU6XS4KKwogMjAyMS0wNy0xNiAgTWVnYW4gR2FyZG5lciAgPG1lZ2FuX2dhcmRuZXJAYXBwbGUu Y29tPgogCiAgICAgICAgIFBpcGUgQXBwIEhpZ2hsaWdodCBzY3JvbGxpbmcgdGhyb3VnaCBVSSBQ cm9jZXNzIGluIHByZXBhcmF0aW9uIGZvciBOb3RlIE92ZXJsYXkgYXZvaWRhbmNlLgpkaWZmIC0t Z2l0IGEvU291cmNlL1dlYktpdExlZ2FjeS9tYWMvV2ViVmlldy9XZWJWaWV3Lm1tIGIvU291cmNl L1dlYktpdExlZ2FjeS9tYWMvV2ViVmlldy9XZWJWaWV3Lm1tCmluZGV4IDA2MDhkYTUxOTdkZGY3 ZWM2OTI1ZDcyYjA5MWFhYmQ4NmNlZTM4ZGYuLmZmMDYwZGQ5NGY4MWMwNDU1ODEwMjYwYzg1OTYw MTBmYzQ3MDYyNGUgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJLaXRMZWdhY3kvbWFjL1dlYlZpZXcv V2ViVmlldy5tbQorKysgYi9Tb3VyY2UvV2ViS2l0TGVnYWN5L21hYy9XZWJWaWV3L1dlYlZpZXcu bW0KQEAgLTU0MjIsNyArNTQyMiw3IEBAIC0gKGluc3RhbmNldHlwZSlpbml0V2l0aENvZGVyOihO U0NvZGVyICopZGVjb2RlcgogICAgICAgICAgICAgICAgIGFsbG93c1VuZG8gPSBbZGVjb2RlciBk ZWNvZGVCb29sRm9yS2V5OkAiQWxsb3dzVW5kbyJdOwogICAgICAgICB9IGVsc2UgewogICAgICAg ICAgICAgaW50IHZlcnNpb247Ci0gICAgICAgICAgICBbZGVjb2RlciBkZWNvZGVWYWx1ZU9mT2Jq Q1R5cGU6QGVuY29kZShpbnQpIGF0OiZ2ZXJzaW9uXTsKKyAgICAgICAgICAgIFtkZWNvZGVyIGRl Y29kZVZhbHVlT2ZPYmpDVHlwZTpAZW5jb2RlKGludCkgYXQ6JnZlcnNpb24gc2l6ZTpzaXplb2Yo aW50KV07CiAgICAgICAgICAgICBmcmFtZU5hbWUgPSBbZGVjb2RlciBkZWNvZGVPYmplY3RdOwog ICAgICAgICAgICAgZ3JvdXBOYW1lID0gW2RlY29kZXIgZGVjb2RlT2JqZWN0XTsKICAgICAgICAg ICAgIHByZWZlcmVuY2VzID0gW2RlY29kZXIgZGVjb2RlT2JqZWN0XTsK