Bug 303847

Summary:	AX: 304101@main introduced the possibility of ref'ing AXIsolatedObjects in a non-thread-safe way
Product:	WebKit	Reporter:	Tyler Wilcock <tyler_w>
Component:	Accessibility	Assignee:	Tyler Wilcock <tyler_w>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	andresg_22, webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	Other
Hardware:	All
OS:	All

Tyler Wilcock

Reported 2025-12-09 09:00:30 PST

The ref-count of AXIsolatedObjects must only be modified on the accessibility thread, but there's no guarantee that the refs added in 304101@main are always in an accessibility thread context.

Attachments
Add attachment proposed patch, testcase, etc.

Radar WebKit Bug Importer

Comment 1 2025-12-09 09:00:36 PST

<rdar://problem/166150627>

Tyler Wilcock

Comment 2 2025-12-09 10:20:40 PST

Pull request: https://github.com/WebKit/WebKit/pull/55116

EWS

Comment 3 2025-12-09 20:33:09 PST

Committed 304201@main (2ae8856c87fd): <https://commits.webkit.org/304201@main> Reviewed commits have been landed. Closing PR #55116 and removing active labels.

Note You need to log in before you can comment on or make changes to this bug.