◆ WebKit WeeklyBeta

Achierius

bmalloc security specialist

89 commits (11mo)
4 security fixes
9 hardening
View all commits on GitHub ↗

Summary

Works almost entirely in WebKit's allocator stack — libpas and bmalloc — with the recurring theme being MTE enablement: per-heap tagging policy, a tagged_bmalloc_heap, previous-tag-exclusion, MTE hard-mode re-enablement, and disabling TZone under MTE. Adjacent work touches JIT Cage relaxation, guard pages on the compact-heap reservation, and ParkingLot spinloop internals, so the footprint spans allocator hardening primitives rather than feature code. The security fixes cluster in the same place the feature work does — an OOB path in MAR code and a race in `pas_segregated_heap_medium_size_directory_for_index` — which makes newly-tagged heap paths and the MTE policy rework a reasonable sweep target for variant analysis.

Components

bmalloc
45%
bmalloc/libpas
30%
WTF
12%
JSC
10%
Platform
3%
WebKit
1%

Security Fix History

Hardening Commits

Recent Commits

1 / 6

← All Contributors