Bug 249061 – Fix use-after-move in WebCore::StyleGradientImage constructor

• Status: RESOLVED
• Resolution: FIXED
• Component: SVG

[David Kilzer (:ddkilzer)]

Fix use-after-free in WebCore::StyleGradientImage() constructor in Source/WebCore/rendering/style/StyleGradientImage.cpp.

```
StyleGradientImage::StyleGradientImage(Data&& data, CSSGradientColorInterpolationMethod colorInterpolationMethod, Vector
<StyleGradientImageStop>&& stops)
    : StyleGeneratedImage { Type::GradientImage, StyleGradientImage::isFixedSize }
    , m_data { WTFMove(data) }
    , m_colorInterpolationMethod { colorInterpolationMethod }
    , m_stops { WTFMove(stops) }
    , m_knownCacheableBarringFilter { stopsAreCacheable(stops) }  // FIXME: Use-after-move of `stops`.
{
}
```

[Radar WebKit Bug Importer]

<rdar://problem/103202572>

[David Kilzer (:ddkilzer)]

Pull request: https://github.com/WebKit/WebKit/pull/7427

[EWS]

Committed 257686@main (40f4e5e1face): <https://commits.webkit.org/257686@main>

Reviewed commits have been landed. Closing PR #7427 and removing active labels.

[David Kilzer (:ddkilzer)]

This was a use-after-move, not a use-after-free.