Bug 308257

Summary: AX: The accessibilityCustomActions implementations capture a temporary by reference and can thus use-after-free
Product: WebKit Reporter: Tyler Wilcock <tyler_w>
Component: AccessibilityAssignee: Tyler Wilcock <tyler_w>
Status: RESOLVED FIXED    
Severity: Normal CC: andresg_22, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: Other   
Hardware: All   
OS: All   

Tyler Wilcock
Reported 2026-02-19 16:53:23 PST
...
Attachments
Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2026-02-19 16:53:29 PST
<rdar://problem/170763347>
Tyler Wilcock
Comment 2 2026-02-19 17:01:20 PST
Pull request: https://github.com/WebKit/WebKit/pull/59041
EWS
Comment 3 2026-02-24 10:38:40 PST
Committed 308138@main (47366ef2cd54): <https://commits.webkit.org/308138@main> Reviewed commits have been landed. Closing PR #59041 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.