Bug 313784

Summary:	[LBSE] Use weak references in SVGPaintOrderLayerItem to avoid keep-alive of dead renderers
Product:	WebKit	Reporter:	Nikolas Zimmermann <zimmermann>
Component:	SVG	Assignee:	Nikolas Zimmermann <zimmermann>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	rbuis, sabouhallawa, webkit-bug-importer, zimmermann
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified

Nikolas Zimmermann

Reported 2026-04-30 15:56:03 PDT

SVGPaintOrderLayerItem caches direct or descendant RenderElement / RenderLayer pointers as part of RenderLayer::m_svgData->childrenInDOMOrder. The use of CheckedPtr was wrong - get rid of it and switch to the WeakPtr variants.

Attachments
Add attachment proposed patch, testcase, etc.

Nikolas Zimmermann

Comment 1 2026-04-30 16:11:12 PDT

Pull request: https://github.com/WebKit/WebKit/pull/64004

EWS

Comment 2 2026-05-01 02:18:20 PDT

Committed 312420@main (32cddbf2e03b): <https://commits.webkit.org/312420@main> Reviewed commits have been landed. Closing PR #64004 and removing active labels.

Radar WebKit Bug Importer

Comment 3 2026-05-01 02:19:12 PDT

<rdar://problem/176007482>

Note You need to log in before you can comment on or make changes to this bug.