RESOLVED FIXED283307
CFNetwork URLRequest::initialize(CFDictionaryRef webKitSecureCodingDictionary) crashes when HTTP headers come in String -> String form
https://bugs.webkit.org/show_bug.cgi?id=283307
Summary CFNetwork URLRequest::initialize(CFDictionaryRef webKitSecureCodingDictionary...
Pedro Varangot
Reported 2024-11-18 11:32:18 PST
This is because it's iterating them like this: [headerFields enumerateKeysAndObjectsUsingBlock:^(NSString *name, NSArray<NSString *> *values, BOOL *stop) { for (NSString * value in values) { and that will call countByEnumeratingWithState:objects:count: on a String (it's an array method) and crash with invalid selector.
Attachments
Test case (9.01 KB, text/html)
2024-11-18 11:34 PST, Pedro Varangot
no flags
Library required to run test case (53.50 KB, application/x-javascript)
2024-11-18 11:35 PST, Pedro Varangot
no flags
Pedro Varangot
Comment 1 2024-11-18 11:34:38 PST
Created attachment 473268 [details] Test case
Pedro Varangot
Comment 2 2024-11-18 11:35:00 PST
Created attachment 473269 [details] Library required to run test case
Pedro Varangot
Comment 3 2024-11-18 11:42:27 PST
Pedro Varangot
Comment 4 2024-11-19 11:51:50 PST
EWS
Comment 5 2024-11-20 16:36:24 PST
Committed 286883@main (1ad5fb316231): <https://commits.webkit.org/286883@main> Reviewed commits have been landed. Closing PR #36808 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.