Bug 257982

Summary:	REGRESSION(262585@main): Potential null dereference of cached images in MemoryCache::destroyDecodedDataForAllImages()
Product:	WebKit	Reporter:	Said Abou-Hallawa <sabouhallawa>
Component:	Images	Assignee:	Said Abou-Hallawa <sabouhallawa>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	sabouhallawa, webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified
See Also:	https://bugs.webkit.org/show_bug.cgi?id=257968

Description Said Abou-Hallawa 2023-06-12 14:57:43 PDT

When the WebProcess cleanup timer fires, MemoryCache may try to release the decoded data of an already deleted CachedImage. MemoryCache stores the list of cached resources as WeakPtrs. So we need to null check these WeakPtrs in forEachResource() before using them.

Comment 1 Said Abou-Hallawa 2023-06-12 14:58:13 PDT

rdar://110339514

Comment 2 Said Abou-Hallawa 2023-06-12 15:31:14 PDT

Pull request: https://github.com/WebKit/WebKit/pull/14890

Comment 3 EWS 2023-06-12 17:12:23 PDT

Committed 265093@main (1fc9a2418bc9): <https://commits.webkit.org/265093@main>

Reviewed commits have been landed. Closing PR #14890 and removing active labels.