← WebKit Silent-Fix Report — 2026-W21
52162f9781 Adopt SaferCPP rules for workerOrWorkletThread() in WorkerOrWorkletGlobalScope
severity low
class UAF
confidence 0.40
WebCore Workers
Primitive: raw workerOrWorkletThread() pointer deref hardened to RefPtr + null check
Triage note: SaferCPP change turning a raw thread-pointer deref into a protected RefPtr with null guard, a lifetime hardening.
Triage note: SaferCPP change turning a raw thread-pointer deref into a protected RefPtr with null guard, a lifetime hardening.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…