← WebKit Silent-Fix Report — 2026-W21

52162f9781  Adopt SaferCPP rules for workerOrWorkletThread() in WorkerOrWorkletGlobalScope

severity low class UAF confidence 0.40 WebCore Workers
David Kilzer Fri May 22 18:34:34 2026 -0700 full: 52162f9781a0415bb85526fbe79793fdf4b47abd bug report ↗ view on GitHub ↗
Primitive: raw workerOrWorkletThread() pointer deref hardened to RefPtr + null check
Triage note: SaferCPP change turning a raw thread-pointer deref into a protected RefPtr with null guard, a lifetime hardening.

Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.

Before / after

Loading diff…