← WebKit Silent-Fix Report — 2026-W25
df1c872b25 SecureCoding::applyProcessCreationParameters dereferences a null unique_ptr
severity low
class LogicError
confidence 0.60
WebKit Shared Cocoa IPC
Primitive: write through a null unique_ptr in process-creation parameter handling
Triage note: Fixes dereference/assignment through a null unique_ptr in IPC creation-parameter handling, a null-deref memory-safety bug.
Triage note: Fixes dereference/assignment through a null unique_ptr in IPC creation-parameter handling, a null-deref memory-safety bug.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…