RESOLVED FIXED322233
CSSFontFace::setStatus should commit m_status before notifying clients 
https://bugs.webkit.org/show_bug.cgi?id=322233
Summary CSSFontFace::setStatus should commit m_status before notifying clients
Vitor Roriz
Reported 2026-08-20 16:37:13 PDT
setStatus() notifies its clients with the m_status member and only assigns newStatus after the notification loop ends. One client, FontFace, resolves the loaded promise, which can run author script that re-enters pump() and drives setStatus() a second time. Clients visited after that point receive the mutated m_status as their oldState.
Attachments
Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2026-08-20 16:37:20 PDT
<rdar://problem/185462848>
Vitor Roriz
Comment 2 2026-08-20 16:41:07 PDT
Pull request: https://github.com/WebKit/WebKit/pull/72082
EWS
Comment 3 2026-08-20 22:32:35 PDT
Committed 319575@main (64a55fd574c4): <https://commits.webkit.org/319575@main> Reviewed commits have been landed. Closing PR #72082 and removing active labels.
EWS
Comment 4 2026-08-21 18:36:52 PDT
Committed 316606.431@safari-7625-branch (4a01be9bd5e2): <https://commits.webkit.org/316606.431@safari-7625-branch> Reviewed commits have been landed. Closing PR #6404 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.