← WebKit — 2026-W39
60b40e2770fb5dbdd10b5d4ddba69794f10dfe6b [Site Isolation] Posted messages can arrive out of order
not a security fix
confidence 0.12
signal score 10.42
Source/WebKit/Shared
Classified as not security-relevant.
Triage note: Moves PendingPostMessages to a shared header and queues UIProcess postMessageToRemote messages per target so a plain message does not overtake one with transferred ports awaiting the NetworkProcess round-trip; a message-ordering correctness change, not an attacker-exploitable security bug.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Moves PendingPostMessages to a shared header and queues UIProcess postMessageToRemote messages per target so a plain message does not overtake one with transferred ports awaiting the NetworkProcess round-trip; a message-ordering correctness change, not an attacker-exploitable security bug.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+6.47), null_guard (+1.2), uaf_lifetime (+4.75), large_churn (-2.0)
Before / after
Loading diff…
On This Page