<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>257982</bug_id>
          
          <creation_ts>2023-06-12 14:57:43 -0700</creation_ts>
          <short_desc>REGRESSION(262585@main): Potential null dereference of cached images in MemoryCache::destroyDecodedDataForAllImages()</short_desc>
          <delta_ts>2023-06-12 17:12:25 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Images</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          <see_also>https://bugs.webkit.org/show_bug.cgi?id=257968</see_also>
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Said Abou-Hallawa">sabouhallawa</reporter>
          <assigned_to name="Said Abou-Hallawa">sabouhallawa</assigned_to>
          <cc>sabouhallawa</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1961146</commentid>
    <comment_count>0</comment_count>
    <who name="Said Abou-Hallawa">sabouhallawa</who>
    <bug_when>2023-06-12 14:57:43 -0700</bug_when>
    <thetext>When the WebProcess cleanup timer fires, MemoryCache may try to release the decoded data of an already deleted CachedImage. MemoryCache stores the list of cached resources as WeakPtrs. So we need to null check these WeakPtrs in forEachResource() before using them.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1961147</commentid>
    <comment_count>1</comment_count>
    <who name="Said Abou-Hallawa">sabouhallawa</who>
    <bug_when>2023-06-12 14:58:13 -0700</bug_when>
    <thetext>rdar://110339514</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1961156</commentid>
    <comment_count>2</comment_count>
    <who name="Said Abou-Hallawa">sabouhallawa</who>
    <bug_when>2023-06-12 15:31:14 -0700</bug_when>
    <thetext>Pull request: https://github.com/WebKit/WebKit/pull/14890</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1961187</commentid>
    <comment_count>3</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2023-06-12 17:12:23 -0700</bug_when>
    <thetext>Committed 265093@main (1fc9a2418bc9): &lt;https://commits.webkit.org/265093@main&gt;

Reviewed commits have been landed. Closing PR #14890 and removing active labels.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>