313364 2026-04-26 15:27:27 -0700 REGRESSION (304469@main): WTR::supportedAttributes() leaks NSMutableArray 2026-04-26 17:20:53 -0700 1 1 1 Unclassified WebKit Accessibility WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar, Regression P2 Normal --- 304071 1 ddkilzer ddkilzer andresg_22 webkit-bug-importer oldest_to_newest 2204674 0 ddkilzer 2026-04-26 15:27:27 -0700 `WTR::supportedAttributes()` in `AccessibilityUIElementMac.mm` leaks an `NSMutableArray` on every call. The function assigns the result of `-[NSArray mutableCopy]` directly to a `RetainPtr<NSMutableArray>` without wrapping it in `adoptNS()`. Since `-mutableCopy` returns a +1 (retained) object and `RetainPtr::operator=` retains again, the array ends up at +2. When the `RetainPtr` destructor releases once, the array is left at +1 -- leaked. The leak was introduced in Bug 304071 (304469@main) which changed `supportedAttributes()` from returning a plain `RetainPtr<NSArray>` (assigned from `-accessibilityAttributeNames`, a +0 return) to a `RetainPtr<NSMutableArray>` (assigned from `-mutableCopy`, a +1 return) without adding `adoptNS()`. The leak is visible when running layout tests with `--leaks`. Each call to `supportedAttributes()` leaks one 64-byte `NSMutableArray` plus its 512-byte backing storage. 2204675 1 webkit-bug-importer 2026-04-26 15:27:33 -0700 <rdar://problem/175635842> 2204682 2 ddkilzer 2026-04-26 15:34:31 -0700 Pull request: https://github.com/WebKit/WebKit/pull/63643 2204707 3 ews-feeder 2026-04-26 17:20:51 -0700 Committed 312056@main (9323616ae50b): <https://commits.webkit.org/312056@main> Reviewed commits have been landed. Closing PR #63643 and removing active labels.