Bug 259830 (CVE-2023-42890) - Better handle NetworkLoad lifecycle inide willPerformHTTPRedirection
Summary: Better handle NetworkLoad lifecycle inide willPerformHTTPRedirection
Status: RESOLVED FIXED
Alias: CVE-2023-42890
Product: WebKit
Classification: Unclassified
Component: Page Loading (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Brady Eidson
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2023-08-04 10:52 PDT by Brady Eidson
Modified: 2023-12-14 07:47 PST (History)
4 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Brady Eidson 2023-08-04 10:52:02 PDT 
Better handle NetworkLoad lifecycle inide willPerformHTTPRedirection, as didCompleteWithError has potential side effects
Comment 1 Brady Eidson 2023-08-04 10:52:19 PDT 
<rdar://problem/113149435>
Comment 2 Brady Eidson 2023-08-04 11:04:06 PDT 
Pull request: https://github.com/WebKit/WebKit/pull/16397
Comment 3 EWS 2023-08-04 17:34:22 PDT 
Committed 266608@main (014d6ff4b81c): <https://commits.webkit.org/266608@main>

Reviewed commits have been landed. Closing PR #16397 and removing active labels.
Comment 4 Fujii Hironori 2023-08-06 14:28:00 PDT 
http/tests/security/service-worker-network-load.html is randomly timing out. 
https://results.webkit.org/?suite=layout-tests&test=http%2Ftests%2Fsecurity%2Fservice-worker-network-load.html
Comment 5 Fujii Hironori 2023-10-05 14:25:41 PDT 
Filed: Bug 262734 – http/tests/security/service-worker-network-load.html is randomly timing out since the beginning