← WebKit — 2026-W41
fc7a51c3f65d681eb93bba0f17803e91b765f0fe [HTML-in-Canvas] DisplayList recorder should be smart pointer
not a security fix
confidence 0.14
signal score 9.67
Source/WebCore/html
Classified as not security-relevant.
Triage note: Converts RecorderImpl from stack/optional/UniqueRef storage to RefCounted with create() factories across PaintRenderingContext2D, ImageBufferDisplayListBackend, RemoteDisplayListRecorder, etc. Lifetime-ownership refactor/hardening, not a specific identified UAF.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Converts RecorderImpl from stack/optional/UniqueRef storage to RefCounted with create() factories across PaintRenderingContext2D, ImageBufferDisplayListBackend, RemoteDisplayListRecorder, etc. Lifetime-ownership refactor/hardening, not a specific identified UAF.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+6.47), null_guard (+1.2), area:Source/WebCore/html (+2.0)
Before / after
Loading diff…
On This Page