← WebKit — 2026-W41

277305bef9b08127390366a33d6e06281fa8cdab  CheckedPtr and CheckedRef casts should return a smart pointer only for an rvalue

not a security fix confidence 0.12 signal score 9.67 Source/WebCore/layout
Classified as not security-relevant.
Triage note: Adds move (rvalue-ref) overloads of downcast/dynamicDowncast on CheckedPtr/CheckedRef and makes lvalue overloads return raw pointer/reference, with mechanical call-site updates (downcast<X>(ptr.get()) -> downcast<X>(ptr)); pure smart-pointer API refactor, no bug fixed.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+6.47), null_guard (+1.2), area:Source/WebCore/layout (+2.0)

Before / after

Loading diff…
On This Page