← WebKit — 2026-W39

fa42178e7969b4f1bd94432f95a1b27340b0af8d  Calls to several WebBackForwardList methods result in leaks

not a security fix confidence 0.15 signal score 6.47 Source/WebKit/UIProcess
Classified as not security-relevant.
Triage note: SaferCPP-style lifetime hardening: return RefPtr<WebBackForwardListItem>/RefPtr<FrameState> and drop the caller-side protect() wrappers, plus matching Swift RefPtr bridging. Raw-pointer-to-RefPtr migration with no identified concrete UAF; falls under the refactor/migration false-positive class.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+6.47)

Before / after

Loading diff…
On This Page