Bug 263492

Summary:	Use a CheckedPtr for RenderObject::m_next
Product:	WebKit	Reporter:	Chris Dumez <cdumez>
Component:	Layout and Rendering	Assignee:	Chris Dumez <cdumez>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	bfulgham, simon.fraser, webkit-bug-importer, zalan
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified

Description Chris Dumez 2023-10-20 21:45:21 PDT

Introduce a PackedCheckedPtr and use it for RenderObject::m_next, to gain extra safety without increasing the size of renderers.

Comment 1 Chris Dumez 2023-10-20 21:47:32 PDT

Pull request: https://github.com/WebKit/WebKit/pull/19387

Comment 2 EWS 2023-10-21 14:09:44 PDT

Committed 269629@main (d4e1b3b3e736): <https://commits.webkit.org/269629@main>

Reviewed commits have been landed. Closing PR #19387 and removing active labels.

Comment 3 Radar WebKit Bug Importer 2023-10-21 14:10:15 PDT

<rdar://problem/117309003>