← WebKit Silent-Fix Report — 2026-W23
8aab904f7092297ec74b591486cc700379fe61d5 Reject WebRTC socket creation with empty address to fix crash
severity medium
class LogicError
confidence 0.55
WebKit NetworkRTC
Primitive: Network process crash on WebRTC UDP socket creation with empty address
Triage note: IPC-reachable NetworkRTCProvider::CreateUDPSocket crashed the RTC thread when given an empty address; fix rejects empty-address socket creation (test sends CreateUDPSocket with empty String via IPCTestingAPI), a web-reachable network-process DoS.
Triage note: IPC-reachable NetworkRTCProvider::CreateUDPSocket crashed the RTC thread when given an empty address; fix rejects empty-address socket creation (test sends CreateUDPSocket with empty String via IPCTestingAPI), a web-reachable network-process DoS.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…