TestController::platformLibraryPathForTesting() returns inner pointer to autoreleased NSString.
This will result in a use-after-free if the const char* pointer is accessed after the NSString object has been released.
This is not currently crashing because WTR::TestController::TestController() leaks autoreleased objects into a top-level autoreleasePool that's never cleared (which was NOT fixed by Bug 205950).
Created attachment 387252 [details]
Comment on attachment 387252 [details]
Clearing flags on attachment: 387252
Committed r254318: <https://trac.webkit.org/changeset/254318>
All reviewed patches have been landed. Closing bug.