Bug 263492

Summary: Use a CheckedPtr for RenderObject::m_next
Product: WebKit Reporter: Chris Dumez <cdumez>
Component: Layout and RenderingAssignee: Chris Dumez <cdumez>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, simon.fraser, webkit-bug-importer, zalan
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

Chris Dumez
Reported 2023-10-20 21:45:21 PDT
Introduce a PackedCheckedPtr and use it for RenderObject::m_next, to gain extra safety without increasing the size of renderers.
Attachments
Add attachment proposed patch, testcase, etc.
Chris Dumez
Comment 1 2023-10-20 21:47:32 PDT
Pull request: https://github.com/WebKit/WebKit/pull/19387
EWS
Comment 2 2023-10-21 14:09:44 PDT
Committed 269629@main (d4e1b3b3e736): <https://commits.webkit.org/269629@main> Reviewed commits have been landed. Closing PR #19387 and removing active labels.
Radar WebKit Bug Importer
Comment 3 2023-10-21 14:10:15 PDT
<rdar://problem/117309003>
Note You need to log in before you can comment on or make changes to this bug.