← WebKit Silent-Fix Report — 2026-W25

fa10d866af  Underflow in truncateByWordCount when the word limit is zero

severity low class IntOverflow confidence 0.55 WebKit Shared TextExtraction
Charlie Wolfe Fri Jun 19 13:40:23 2026 -0700 full: fa10d866af3305a123a7ad62bc43e25d6438d8b8 bug report ↗ view on GitHub ↗
Primitive: unsigned underflow when word limit is zero
Triage note: Adds a zero-limit early return preventing an unsigned underflow in word-count truncation.

Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.

Before / after

Loading diff…