RESOLVED FIXED312491
Event's target can get its JS wrapper GC'ed 
https://bugs.webkit.org/show_bug.cgi?id=312491
Summary Event's target can get its JS wrapper GC'ed
Ryosuke Niwa
Reported 2026-04-16 10:49:58 PDT
JSEvent doesn't add the opaque root of the target during marking phase, resulting in its JS wrapper to get collected while Event is still reachable.
Attachments
Add attachment proposed patch, testcase, etc.
Ryosuke Niwa
Comment 1 2026-04-16 11:01:05 PDT
Pull request: https://github.com/WebKit/WebKit/pull/62908
Radar WebKit Bug Importer
Comment 2 2026-04-23 10:50:13 PDT
<rdar://problem/175439759>
EWS
Comment 3 2026-04-25 06:42:13 PDT
Committed 312017@main (05f145f9a116): <https://commits.webkit.org/312017@main> Reviewed commits have been landed. Closing PR #62908 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.