iidmsa

WebCore hardening contributor

136 commits (11mo)

5 hardening

Summary

iidmsa works primarily in WebCore with regular spillover into JSC and WTF, and the throughline is lifetime correctness and C++ modernization rather than feature work: removing incorrect `NODELETE` annotations, fixing use-after-move in `Document::processCaptureStateDidChange()` and `WebAssemblyScriptBufferSourceProvider::create()`, adopting Concepts in `wtf/TypeTraits.h`, and replacing `std::bind`, alongside a run of MediaRecorder frame-drop fixes. The work isn't security-fix driven, but hardening recurs as a deliberate sweep — converting owner/client back-reference interfaces (`SpinButtonOwner`, `DateTimeFieldElementFieldOwner`, `PlatformXR::TrackingAndRenderingClient`) to ref-countable types one component at a time. Systematic-variant candidate: the owner/client interfaces this sweep hasn't reached yet, in form-control elements and platform device classes, are by definition still holding raw back-pointers; the `NODELETE` removals are a parallel signal, each marking a spot where the code was asserting a lifetime guarantee it did not actually hold.

Components

WebCore

42%

JSC

16%

Other

12%

WebKit

10%

WTF

10%

WebGPU

Security Fix History

No security fixes recorded

Hardening Commits

Recent Commits

2026-09-18 Fix the warnings for extern-template in JSGenericTypedArrayViewConstructor
2026-09-17 Move Forwarding Reference in GPU process proxies
2026-09-12 [Gardening] http/tests/webgpu/webgpu/shader/execution/zero_init.html periodically crashes on x86
2026-09-11 Remove unnecessary temporary String creation at CSS parsing call sites
2026-09-10 Adopt `NODELETE` annotation in `StyleSheetList::supportedPropertyNames()` and `MockPageOverlayClient::copyAccessibilityA
2026-09-09 Pass `TextCheckingResult` by const reference so `handleAcceptedCandidateWithSoftSpaces()` can be `NODELETE`
2026-09-05 [JSC] Use named enums for register enums
2026-09-04 Remove incorrect `NODELETE` annotation from `Document::invalidateAccessKeyCacheSlowCase()`
2026-09-02 Harden `PlatformXR::Device` by making `TrackingAndRenderingClient` ref-countable
2026-09-01 [JSC] offlineasm: emit tbz/tbnz for single-bit test branches on ARM64
2026-08-28 Fix typo in `WGSL::Types::Primitive` and `WGSL::nameForPrimitiveKind`
2026-08-27 Harden `DateTimeFieldElement` by making `DateTimeFieldElementFieldOwner` ref-countable
2026-08-25 Harden `SpinButtonElement` by making `SpinButtonOwner` ref-countable
2026-08-24 Use C++20 Concepts in `wtf/TypeTraits.h`
2026-08-22 [Gardening] Remove outdated test expectation after 319592@main
2026-08-20 Use-after-move in `WebAssemblyScriptBufferSourceProvider::create()`
2026-08-18 Require C++23 for the PAL Core clang module
2026-08-12 Use C++14 lambdas instead of `std::bind()` in WebCore
2026-08-11 Potential use-after-move in `Document::processCaptureStateDidChange()`
2026-08-10 Use `inline constexpr` instead of `constexpr inline` in JavaScriptCore
2026-08-09 Introduce an API test for MediaRecorder dropping a frame whenever the writer input reports not ready
2026-08-07 MediaRecorder drops a frame whenever the writer input reports not ready
2026-08-05 MediaRecorder drops pending video frames when recording is stopped
2026-08-03 Pass `VisibleRectContext` by const reference so visible rect computation can be `NODELETE`
2026-07-28 Remove incorrect `NODELETE` annotation from `PropertySetCSSDescriptors::reattach()`
2026-07-22 Remove incorrect `NODELETE` annotation from `cbor/CBORValue.h`
2026-07-22 Reduce further unnecessary usage of ternary operator in WebCore
2026-07-16 Use C++17 `inline constexpr` variables instead of `extern const` in WebKit
2026-07-16 Use C++17 `inline constexpr` variables instead of `extern const` in WebCore
2026-07-14 Use C++17 `inline constexpr` variables instead of `extern const` in JavaScriptCore
2026-07-10 Simplify incrementing `WTF::HashMap` counts by dropping redundant `isNewEntry` check in `WTF`
2026-07-09 Replace common typo "FIMXE" with the intended "FIXME" in WebKit
2026-07-03 Move Forwarding Reference in `IPC/Connection.h`
2026-06-25 Make `EditingRange::clampedFirstLineRange` defined out-of-line and move into a `.cpp` file
2026-06-24 [Gardening] Remove ambiguous `imported/w3c/web-platform-tests/svg/painting/reftests/non-scaling-stroke-non-uniform-scale
2026-06-18 Use `[[msvc::no_unique_address]]` extension attribute to enable object layout optimization on the MSVC ABI
2026-06-15 Remove unnecessary `std::optional` initialization in WebGPU
2026-06-13 Add WebKit logo on `perf.webkit.org`
2026-06-12 Remove unnecessary `std::optional` initialization in JavaScriptCore
2026-06-11 Remove unnecessary `std::optional` initialization in WebCore
2026-06-10 Remove unnecessary `std::optional` initialization in WebCore
2026-06-10 Remove unnecessary `std::optional` initialization in WebKit
2026-06-06 Remove incorrect `NODELETE` annotations from `dom/Document.h`
2026-06-05 Use `WTF::toArray()` instead of C-style arrays in JavaScriptCore
2026-06-05 Remove ambiguous `imported/w3c/web-platform-tests/css/css-fonts/variations/variable-avar2-warp.html` entry in GTK Test E
2026-06-03 [Gardening] Remove outdated test expectation after 314387@main
2026-05-25 Fix a few typos and grammar issues in `perf.webkit.org/ReadMe.md`
2026-05-21 Replace all remaining uses of `std::to_array()` with `WTF::toArray()` in WebKit
2026-05-19 Use newly introduced `WTF::toArray()` instead of `std::to_array()` in WebKit
2026-05-15 [Gardening][WPE] Update outdated `imported/w3c/web-platform-tests/xhr/send-redirect-bogus.htm` name after 312947@main
2026-05-14 Introduce `WTF::toArray()` to work around `std::to_array()` not being detected as `NODELETE` by static analysis
2026-05-13 Adopt more C++20 Concepts in WTF::RetainPtr and WTF::RetainRef
2026-04-24 Address Use-After-Move in primitives/StylePrimitiveNumericTypes+Conversions
2026-04-22 Remove incorrect `NODELETE` annotation from dom/Node
2026-04-17 Use C++20 std::map::contains in WTF::SequesteredArenaAllocator
2026-04-17 Remove incorrect `NODELETE` annotation from dom/ChildNodeList
2026-04-16 Simplify incrementing WTF::HashMap counts by dropping redundant isNewEntry check in WebCore
2026-04-14 [Gardening][macOS Release WK2] 27X imported/w3c/web-platform-tests/html/semantics/embedded-content/media-elements/* (Lay
2026-04-09 Reduce unnecessary usage of ternary operator in WebCore
2026-04-08 Adopt `NODELETE` annotation in more places in WebCore/dom
2026-04-03 Adopt `NODELETE` annotation in more places in Source/WebCore
2026-03-31 Optimize redundant map lookups in GPU/media/RemoteImageDecoderAVF
2026-03-30 Reduce unnecessary protected local variables in no-delete context in WebCore
2026-03-28 Remove outdated WPT `feature-policy` directory from TestExpectations
2026-03-26 Reduce more unnecessary protected local variables in no-delete context in WebCore
2026-03-23 Reduce more unnecessary protected local variables in no-delete context in WebCore
2026-03-19 Reduce unnecessary protected local variables in no-delete context in WebCore
2026-03-18 Fix typo in test gardening commit 309164@main
2026-03-08 Introduce C++20 WTF::IntegralOrEnum concept and adopt it where appropriate
2026-03-06 Use C++17 inline constexpr variables instead of extern const in JavaScriptCore/runtime
2026-03-02 Add C++17 [[nodiscard]] to WTF::Variant functions
2026-03-02 Address unnecessary copy initialization in JavaScriptCore
2026-03-01 Optimize redundant map lookups in svg/legacy/LegacyRenderSVGResourceFilter
2026-02-27 Address Use-After-Move in primitives/StylePrimitiveNumericTypes+Conversions
2026-02-26 Address Use-After-Move in csp/ContentSecurityPolicy
2026-02-25 Use C++17 if constexpr with initializers for std::optional constexpr variables
2026-02-24 Address Use-After-Move in cf/VectorCF
2026-02-23 Use C++20 std::ranges::find more in the codebase
2026-02-22 Drop unnecessary usage of ternary operator in WebKit/
2026-02-21 Optimize redundant map lookups in rendering/RenderFlexibleBox
2026-02-20 Address Use-After-Move in svg/properties/SVGAnimationAdditiveListFunction
2026-02-19 Adopt NODELETE annotation on more functions in WebCore/rendering
2026-02-18 Adopt NODELETE annotation on more non-inline trivial functions in WebCore/rendering
2026-02-17 Adopt NODELETE annotation on non-inline trivial functions in WebCore/rendering
2026-02-15 Adopt C++20 Concepts in wtf/Deque
2026-02-13 Re-introduce code comments and FIXME after 307360@main
2026-02-12 Use C++17 inline constexpr variables instead of extern const in WebCore
2026-02-12 Reduce unsafe buffer usage by using C++20 std::to_address in JavaScriptCore
2026-02-11 Adopt NODELETE annotation on non-inline trivial functions in style/StyleBuilderState
2026-02-08 Use C++20 std::ranges::any_of in WebCore
2026-02-05 Drop unnecessary usage of ternary operator in WTF
2026-02-04 Optimize redundant map lookups in graphics/GraphicsLayer
2026-02-02 Add C++17 [[nodiscard]] to WTF::Vector accessor functions
2026-02-01 Use C++20 std::ranges::count in WebCore
2026-01-30 Reduce unsafe buffer usage by using C++20 std::to_address in WTF
2026-01-27 Reduce unnecessary ref count churn in WTF
2026-01-27 Adopt C++20 Concepts in dfg/DFGForAllKills
2026-01-26 Eliminate unsafe buffer usage by adopting more C++20 std::ranges algorithms
2026-01-26 Drop unnecessary usage of ternary operator in JavaScriptCore
2026-01-22 Use C++20 std::ranges::copy in WebCore/testing
2026-01-18 Use C++20 std::ranges::copy in JavaScriptCore/jit
2026-01-11 Drop WTF WARN_UNUSED_RETURN and directly use C++17 [[nodiscard]]
2026-01-08 [Gardening][macOS WK2] 2X webarchive/loading-* (Layout-Tests) progressed on macOS platform
2026-01-08 [Gardening][iOS] 2X webarchive/loading-* (Layout-Tests) progressed on iOS platform
2025-12-12 Modernize WTF WARN_UNUSED_RETURN to use C++17 [[nodiscard]]
2025-12-11 Modernize WTF WARN_UNUSED_RETURN to use C++17 [[nodiscard]]
2025-12-08 Adopt LIFETIME_BOUND in JavaScriptCore/dfg
2025-12-05 Drop unnecessary null check after WTF::makeUnique in workers/WorkerScriptLoader.cpp
2025-12-04 Adopt C++20 Concepts in JavaScriptCore/jit
2025-12-03 Add C++17 [[nodiscard]] to WTF::makeUnique and variants
2025-12-03 Fix WPT failure for `css/cssom/shorthand-values.html`
2025-12-01 Use more C++20 std::ranges::sort
2025-11-27 Sync `html/canvas` root-level tests from WPT Upstream
2025-11-27 Use C++20 std::ranges projections in JavaScriptCore
2025-11-27 Drop unnecessary null check after WTF::makeUnique in html/canvas/CanvasFilterContextSwitcher.cpp
2025-11-26 [Gardening][macOS WK1] 8X fast/forms/number/number-* (Layout-Tests) progressed on macOS platform
2025-11-25 Check for assignment to self in WTF containers' operator=()
2025-11-22 Drop unnecessary null check after WTF::makeUnique in graphics/win/MediaPlayerPrivateMediaFoundation.cpp
2025-11-21 Use C++20 std::ranges::sort in JavaScriptCore
2025-11-21 Drop unnecessary null check after WTF::makeUnique in graphics/ImageBuffer.cpp
2025-11-21 Use C++20 std::ranges::sort in WTF & Tests/WTF
2025-11-20 Adopt C++20 Concepts in JavaScriptCore/dfg
2025-11-16 Use WTF::makeUnique<T>() instead of .reset(new T())
2025-11-13 Use C++20 std::ranges::reverse in JavaScriptCore
2025-11-12 Adopt C++20 Concepts in JavaScriptCore/bytecompiler
2025-11-11 Use std::minmax() where appropriate
2025-11-09 Fix typo in `mouse-cursor-udpate-during-raf.html`
2025-11-09 Use C++20 std::ranges::fill in JavaScriptCore
2025-11-08 Use C++20 std::ranges::fill in WTF
2025-11-07 Adopt C++20 Concepts in JavaScriptCore/bytecode
2025-11-07 Use C++20 std::ranges::fill in WebCore
2025-11-05 Adopt C++20 Concepts in JavaScriptCore/b3
2025-11-04 Adopt C++20 Concepts in JavaScriptCore/assembler
2025-11-04 Use C++20 std::ranges::any_of in JavaScriptCore
2025-11-03 Use C++20 std::ranges::any_of in WebKit
2025-11-03 Use C++20 std::ranges::any_of in WebCore

1 / 10

← All Contributors