← WebKit Silent-Fix Report — 2026-W23
2a8ad89393e742e18a6df250b4f3fd579b0ead4e Fix ignored `isKindOfClass` check in TextRecognitionResult::extractAttributedString()
severity low
class TypeConfusion
confidence 0.55
WebCore TextRecognition Cocoa
Primitive: Restore ignored isKindOfClass type check in extractAttributedString
Triage note: Original code used a comma/semicolon so the isKindOfClass result was discarded (`[analysis isKindOfClass:...]; [analysis respondsToSelector:...]`), allowing _attributedStringForRange to be sent to an object of the wrong class; fix requires both checks with &&. respondsToSelector still limited the impact, so low severity.
Triage note: Original code used a comma/semicolon so the isKindOfClass result was discarded (`[analysis isKindOfClass:...]; [analysis respondsToSelector:...]`), allowing _attributedStringForRange to be sent to an object of the wrong class; fix requires both checks with &&. respondsToSelector still limited the impact, so low severity.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…