← WebKit Silent-Fix Report — 2026-W23

349e1d8549509c1925480da94432d2212d23903a  Fix potential null deference under globalObjectFromBodyOwner()

severity low class Other confidence 0.55 Fetch
Chris Dumez Wed Jun 3 03:01:58 2026 -0700 full: 349e1d8549509c1925480da94432d2212d23903a bug report ↗ view on GitHub ↗
Primitive: Null pointer dereference in globalObjectFromBodyOwner()
Triage note: globalObjectFromBodyOwner() computed context as possibly null then unconditionally called context->globalObject(); fix adds a null check returning nullptr, closing a null-deref crash reachable when the body owner has no script execution context.

Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.

Before / after

Loading diff…