285446 2025-01-06 10:49:27 -0800 Commit provisional history items that are not cancelled during policy decision 2025-01-08 13:23:39 -0800 1 1 1 Unclassified WebKit History WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED https://bugs.webkit.org/show_bug.cgi?id=285579 https://bugs.webkit.org/show_bug.cgi?id=285627 InRadar P2 Normal --- 1 charliew charliew fujii webkit-bug-importer oldest_to_newest 2085109 0 charliew 2025-01-06 10:49:27 -0800 In 285421@main, I made the UI process aware of when a web process starts a back/forward navigation but has not yet committed it. However, we did not always notify the UI process when the item was committed. If we fail to notify the UI process, it can result in a state where the current index becomes stale and the provisional index is cleared, leading to a possible out-of-bounds crash when using the current index. 2085110 1 charliew 2025-01-06 10:49:28 -0800 <rdar://problem/142028791> 2085111 2 charliew 2025-01-06 10:50:20 -0800 Pull request: https://github.com/WebKit/WebKit/pull/38577 2085373 3 ews-feeder 2025-01-07 03:18:51 -0800 Committed 288518@main (f2981ff7b160): <https://commits.webkit.org/288518@main> Reviewed commits have been landed. Closing PR #38577 and removing active labels. 2085711 4 fujii 2025-01-07 22:40:04 -0800 Regressed: Bug 285579 – REGRESSION(288518@main): http/tests/navigation/forward-and-cancel.html is crashing