Bug 305240

Summary: REGRESSION(300839@main): Use after free in WTR::WKURLArrayFromWKStringArray()
Product: WebKit Reporter: David Kilzer (:ddkilzer) <ddkilzer>
Component: Tools / TestsAssignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Normal CC: webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
See Also: https://bugs.webkit.org/show_bug.cgi?id=304966
https://bugs.webkit.org/show_bug.cgi?id=305291
Bug Depends on: 299298    
Bug Blocks: 305278    

David Kilzer (:ddkilzer)
Reported 2026-01-09 17:21:33 PST
Use after free in WTR::WKURLArrayFromWKStringArray() since 300839@main. Causes crashes when running tests under ASAN.
Attachments
Radar WebKit Bug Importer
Comment 1 2026-01-09 17:21:46 PST
David Kilzer (:ddkilzer)
Comment 2 2026-01-09 18:46:13 PST
David Kilzer (:ddkilzer)
Comment 3 2026-01-11 08:47:36 PST
Committed 305415@main (c44357d): https://commits.webkit.org/305415@main Reviewed commits have been landed. Closing PR #56373 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.