Bug 229121 - -[WebView initWithCoder:] should use -[NSCoder decodeValueOfObjCType:at:size:]
Summary: -[WebView initWithCoder:] should use -[NSCoder decodeValueOfObjCType:at:size:]
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebKit Misc. (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: David Kilzer (:ddkilzer)
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2021-08-15 08:38 PDT by David Kilzer (:ddkilzer)
Modified: 2021-08-16 07:45 PDT (History)
2 users (show)

See Also:

Attachments
Patch v1 (1.60 KB, patch)
2021-08-15 08:40 PDT, David Kilzer (:ddkilzer) 		no flags Details | Formatted Diff | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description David Kilzer (:ddkilzer) 2021-08-15 08:38:08 PDT 
-[WebView initWithCoder:] should use -[NSCoder decodeValueOfObjCType:at:size:].

Found by clang static analyzer:

Deprecated method '-decodeValueOfObjCType:at:' is insecure as it can lead to potential buffer overflows. Use the safer '-decodeValueOfObjCType:at:size:' method
Comment 1 Radar WebKit Bug Importer 2021-08-15 08:39:28 PDT 
<rdar://problem/81956163>
Comment 2 David Kilzer (:ddkilzer) 2021-08-15 08:40:41 PDT 
Created attachment 435565 [details]
Patch v1
Comment 3 EWS 2021-08-16 07:45:19 PDT 
Committed r281081 (240541@main): <https://commits.webkit.org/240541@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 435565 [details].