◆ WebKit WeeklyBeta

Constellation

JSC security specialist

713 commits (7mo)
53 security fixes
11 hardening
View all commits on GitHub ↗

Summary

Constellation works almost entirely in JSC, with a secondary footprint in WTF, and recent activity is dominated by a sustained rewrite of the garbage collector's weak-reference and allocation machinery — WeakBlock, WeakGCMap/WeakGCSet, HandleToGlobalMap, allocator unification, moving GC threads to libpas — alongside Air register allocation and IPInt tightening. The security-flagged commits land in that same territory (allocator unification, missing checks in ObjectCreate constant folding, making DateInstance non-destructible), and the hardening reads as concurrency and invariant work: a storeStoreFence before publishing `RegExp::m_regExpJITCode`, loop-bound assertions promoted to RELEASE_ASSERT. Systematic-variant candidate: the in-flight weak-map and allocator redesign is rewriting object lifetime primitives in place, and the concurrent CloneSerializer/CloneDeserializer exception-check alignment implies structured clone was not previously following JSC's checking discipline.

Components

JSC
77%
WTF
9%
WebCore
5%
Other
3%
WebKit
3%
bmalloc
1%

Security Fix History

1 / 6

Hardening Commits

1 / 2

Recent Commits

1 / 34

← All Contributors