← WebKit — 2026-W39
0dca5c74315b36f9f0543153653d67bb3be8d670 [Site Isolation]Saturate string match count instead of overflowing across processes
not a security fix
confidence 0.2
signal score 6.5
Source/WebKit/UIProcess
Classified as not security-relevant.
Triage note: Adds CheckedUint32 overflow handling and maxMatchCount clamping to the find-in-page count aggregator; a defensive integer-overflow fix affecting only the reported match count, no memory-safety impact.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Adds CheckedUint32 overflow handling and maxMatchCount clamping to the find-in-page count aggregator; a defensive integer-overflow fix affecting only the reported match count, no memory-safety impact.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+3.0), uaf_lifetime (+2.2), surgical (+1.3)
Before / after
Loading diff…
On This Page