Bug 300534

Summary: [SaferCPP] FrameSelection are not checked in CharacterData.cpp
Product: WebKit Reporter: Anthony Tarbinian <a.tarbinian>
Component: WebCore Misc.Assignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Normal CC: webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

Anthony Tarbinian
Reported 2025-10-10 17:10:25 PDT
Lifetime of frame->selection() is not checked in CharacterData.cpp
Attachments
Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2025-10-10 17:10:33 PDT
<rdar://problem/162403789>
Anthony Tarbinian
Comment 2 2025-10-10 17:14:00 PDT
Pull request: https://github.com/WebKit/WebKit/pull/52150
EWS
Comment 3 2025-10-14 14:53:22 PDT
Committed 301499@main (9a029b1e8b76): <https://commits.webkit.org/301499@main> Reviewed commits have been landed. Closing PR #52150 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.