RESOLVED FIXED285446
Commit provisional history items that are not cancelled during policy decision 
https://bugs.webkit.org/show_bug.cgi?id=285446
Summary Commit provisional history items that are not cancelled during policy decision
Charlie Wolfe
Reported 2025-01-06 10:49:27 PST
In 285421@main, I made the UI process aware of when a web process starts a back/forward navigation but has not yet committed it. However, we did not always notify the UI process when the item was committed. If we fail to notify the UI process, it can result in a state where the current index becomes stale and the provisional index is cleared, leading to a possible out-of-bounds crash when using the current index.
Attachments
Add attachment proposed patch, testcase, etc.
Charlie Wolfe
Comment 1 2025-01-06 10:49:28 PST
<rdar://problem/142028791>
Charlie Wolfe
Comment 2 2025-01-06 10:50:20 PST
Pull request: https://github.com/WebKit/WebKit/pull/38577
EWS
Comment 3 2025-01-07 03:18:51 PST
Committed 288518@main (f2981ff7b160): <https://commits.webkit.org/288518@main> Reviewed commits have been landed. Closing PR #38577 and removing active labels.
Fujii Hironori
Comment 4 2025-01-07 22:40:04 PST
Regressed: Bug 285579 – REGRESSION(288518@main): http/tests/navigation/forward-and-cancel.html is crashing
Note You need to log in before you can comment on or make changes to this bug.