<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>282213</bug_id>
          
          <creation_ts>2024-10-28 16:52:27 -0700</creation_ts>
          <short_desc>REGRESSION(283073@main): Causes &apos;bad bounds&apos; crashes</short_desc>
          <delta_ts>2024-11-01 12:43:16 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>New Bugs</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>279033</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="WebKit Commit Bot">commit-queue</reporter>
          <assigned_to name="WebKit Commit Bot">commit-queue</assigned_to>
          <cc>ahmad.saleem792</cc>
    
    <cc>webkit-bug-importer</cc>
    
    <cc>zalan</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>2071097</commentid>
    <comment_count>0</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2024-10-28 16:52:27 -0700</bug_when>
    <thetext>https://commits.webkit.org/283073@main introduced a regression:
Causes &apos;bad bounds&apos; crashes

This is an automatic bug report generated by webkitbot. If this bug
report was created because of a flaky test, please file a bug for the flaky
test (if we don&apos;t already have one on file) and dup this bug against that bug
so that we can track how often these flaky tests fail.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2071099</commentid>
    <comment_count>1</comment_count>
      <attachid>473067</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2024-10-28 16:52:35 -0700</bug_when>
    <thetext>Created attachment 473067
[fast-cq]REVERT of 283073@main

Any committer can land this patch automatically by marking it commit-queue+.  The commit-queue will build and test the patch before landing to ensure that the revert will be successful.  This process takes approximately 15 minutes.

If you would like to land the revert faster, you can use the following command:

  webkit-patch land-attachment ATTACHMENT_ID

where ATTACHMENT_ID is the ID of this attachment.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2071134</commentid>
    <comment_count>2</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2024-10-28 19:13:34 -0700</bug_when>
    <thetext>Committed 285805@main (3d7b966920e8): &lt;https://commits.webkit.org/285805@main&gt;

All reviewed patches have been landed. Closing bug and clearing flags on attachment 473067.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2071135</commentid>
    <comment_count>3</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2024-10-28 19:14:16 -0700</bug_when>
    <thetext>&lt;rdar://problem/138808599&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2072171</commentid>
    <comment_count>4</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2024-11-01 12:43:16 -0700</bug_when>
    <thetext>Committed 283286.406@safari-7620-branch (b08f477796ff): &lt;https://commits.webkit.org/283286.406@safari-7620-branch&gt;

Reviewed commits have been landed. Closing PR #2175 and removing active labels.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>473067</attachid>
            <date>2024-10-28 16:52:35 -0700</date>
            <delta_ts>2024-10-28 19:13:35 -0700</delta_ts>
            <desc>[fast-cq]REVERT of 283073@main</desc>
            <filename>bug-282213-20241028235235.patch</filename>
            <type>text/plain</type>
            <size>3630</size>
            <attacher name="WebKit Commit Bot">commit-queue</attacher>
            
              <data encoding="base64">RnJvbSBlN2FhMmU5ZjMwNDBkNDA3NGEwOWI4OTg2Y2QwNDU5NzEzMDY1ODkzIE1vbiBTZXAgMTcg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</data>

          </attachment>
      

    </bug>

</bugzilla>