Bug 258946

Summary:	Protect image inside MemoryCache::destroyDecodedDataForAllImages()
Product:	WebKit	Reporter:	Chris Dumez <cdumez>
Component:	WebCore Misc.	Assignee:	Chris Dumez <cdumez>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified

Description Chris Dumez 2023-07-06 13:44:12 PDT

Protect image inside MemoryCache::destroyDecodedDataForAllImages() before calling destroyDecodedData() on it, to make sure the Image stays alive for the duration of the function execution.

Comment 1 Chris Dumez 2023-07-06 13:46:13 PDT

Pull request: https://github.com/WebKit/WebKit/pull/15610

Comment 2 Chris Dumez 2023-07-07 11:05:07 PDT

<rdar://111807064>

Comment 3 EWS 2023-07-07 11:52:47 PDT

Committed 265857@main (cdbf599aeb5f): <https://commits.webkit.org/265857@main>

Reviewed commits have been landed. Closing PR #15610 and removing active labels.