Bug 229121 - -[WebView initWithCoder:] should use -[NSCoder decodeValueOfObjCType:at:size:]
Summary: -[WebView initWithCoder:] should use -[NSCoder decodeValueOfObjCType:at:size:]
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebKit Misc. (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: David Kilzer (:ddkilzer)
Keywords: InRadar
Depends on:
Reported: 2021-08-15 08:38 PDT by David Kilzer (:ddkilzer)
Modified: 2021-08-16 07:45 PDT (History)
2 users (show)

See Also:

Patch v1 (1.60 KB, patch)
2021-08-15 08:40 PDT, David Kilzer (:ddkilzer)
no flags Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description David Kilzer (:ddkilzer) 2021-08-15 08:38:08 PDT
-[WebView initWithCoder:] should use -[NSCoder decodeValueOfObjCType:at:size:].

Found by clang static analyzer:

Deprecated method '-decodeValueOfObjCType:at:' is insecure as it can lead to potential buffer overflows. Use the safer '-decodeValueOfObjCType:at:size:' method
Comment 1 Radar WebKit Bug Importer 2021-08-15 08:39:28 PDT
Comment 2 David Kilzer (:ddkilzer) 2021-08-15 08:40:41 PDT
Created attachment 435565 [details]
Patch v1
Comment 3 EWS 2021-08-16 07:45:19 PDT
Committed r281081 (240541@main): <https://commits.webkit.org/240541@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 435565 [details].