ruthvikkonda

WebCore security specialist

118 commits (10mo)

10 security fixes

Summary

Primarily WebCore and WebGPU, with a recurring line of IPC plumbing work — bridging Swift message receivers into the stream IPC layer — alongside a steady stream of janitorial unused-include removals across model, WebXR, and WebGPU code. The security fixes cluster tightly in the GPU process trust boundary: rejecting duplicate IPC messages (RemoteMediaPlayerProxy audio source provider creation, duplicate bind group entries in `Device::createBindGroup`), state that fails to reset between command buffers, and a cross-thread RefCounted race from sharing an audio curve object across threads. Systematic-variant candidate: the "duplicate IPC message should be rejected" and "per-command-buffer state not cleared" shapes both recur here, so sibling WebGPU and RemoteMediaPlayer entry points that assume once-only invocation or per-submission state reset are the natural sweep.

Components

WebCore

43%

WebGPU

22%

WebKit

18%

Platform

Site Isolation

Other

Security Fix History

Hardening Commits

No hardening commits recorded

Recent Commits

2026-08-06 [model] Remove unused <limits> include in LazyLoadModelObserver
2026-08-05 [WebGPU] Remove unused WebGPUDowncastConvertToBackingContext.h include in WebGPUImpl
2026-08-05 Swift IPC message receivers cannot be annotated with EnabledBy
2026-07-29 [WebXR] Remove unused Scope.h include in WebXRWebGLLayer
2026-07-29 Stream IPC message receivers can dispatch synchronous messages to Swift
2026-07-27 Stream IPC message receivers can call directly into Swift
2026-07-24 [model] Remove unused GraphicsLayerCA.h include in HTMLModelElement
2026-07-23 [WebXR] Remove unused WebXRView.h include in WebXRSession
2026-07-21 [model] Remove unused Color.h include in ModelPlayer
2026-07-17 [WebGPU] Remove unused WebGPUAdapterImpl.h include in WebGPUCreateImpl
2026-07-14 [WebXR] Remove unused Gamepad.h include in WebXRGamepad
2026-07-10 [WebGPU] Remove unused WebGPUTextureDescriptor.h include in WebGPUPresentationContextImpl
2026-07-09 [WebGPU] Remove duplicate no-op m_swapChain = nullptr in PresentationContextImpl::unconfigure
2026-07-09 PlaceholderModelPlayer camera and animation methods do not call their completion handlers
2026-07-08 Use protect() instead of Ref/RefPtr { } in mediasource code
2026-07-08 Use protect() instead of Ref { } in XML code
2026-07-06 RemoteMediaPlayerProxy::createAudioSourceProvider should reject duplicate IPC 2026-W27
2026-07-02 [WebCore] Store WaveShaperProcessor curve as Vector<float> to avoid cross-thread RefCounted race ·
2026-07-02 [WebGPU] Per-buffer m_mustTakeSlowIndexValidationPath cleared between command buffers leads to GPU OOB vertex fetch ·
2026-07-02 Use protect() instead of Ref { } in SVG animation and graphics code
2026-07-01 Dynamic content scaling display lists should not be requested while preparing for display ·
2026-06-30 Reduce use of `.get()` for smart pointers in WebModelPlayer
2026-06-29 [WebGPU] Reject duplicate binding entries in Device::createBindGroup ·
2026-06-29 [WGSL] shader,validation,types,pointer:access_mode:* is failing
2026-06-22 Reland "[model] <model> element is not captured in Tab Overview snapshots on macOS"
2026-06-18 REGRESSION(315436@main): WebKit SPI audit fails on Rave debug with unrecognized symbol "CGImageSetCachingFlags"
2026-06-18 Use protect() instead of Ref/RefPtr { } in CSS code
2026-06-18 [model] <model> element is not captured in Tab Overview snapshots on macOS
2026-06-16 Use protect() instead of Ref { } in SVG filter and gradient element code
2026-06-09 Make Ruthvik Konda a reviewer
2026-06-04 Use protect() instead of Ref/RefPtr { } in webcodecs and identity code
2026-06-04 Reduce use of `.get()` for smart pointers in model element code
2026-06-04 Use protect() instead of Ref/RefPtr { } in IPC code
2026-06-04 Reduce remaining `.get()` calls on smart pointers in WebGPU
2026-05-29 [cleanup] Use [] instead of [&] for empty-body lambdas in HTMLModelElement
2026-05-29 Fix typo in GPUBuffer.cpp validation error message
2026-05-28 Reduce use of `.get()` for smart pointers in WebXR
2026-05-27 Reduce use of `.get()` for smart pointers in WebGPU
2026-05-20 Use protect() instead of RefPtr { } in style code
2026-05-15 [model] Adopt public RealityCoreRenderer and ShaderGraph APIs
2026-05-15 [model] Adopt public RealityCoreTextureProcessing API
2026-05-15 Use protect() instead of Ref { } / RefPtr { } in history, crypto, and storage code
2026-05-15 [model] Remove dead imports in GPUProcess model source
2026-05-15 Use protect() instead of Ref { } in style code
2026-05-13 Use protect() instead of RetainPtr { } in editing code
2026-05-08 REGRESSION(310941@main): Null deref in AlternativeTextController::respondToChangedSelection when endOfWord() returns nul
2026-05-05 Use protect() instead of RefPtr { } in editing code
2026-05-05 [Gardening] http/tests/site-isolation/remote-frame-loaded-while-hidden.html is no longer failing
2026-05-01 Use protect() instead of Ref { } in editing code
2026-05-01 ANGLE: Metal: Add zero-init return for functions missing return statements 2026-W17
2026-04-29 Use protect() instead of Ref { } in applepay-ams-ui, mediacapabilities, and url-pattern code
2026-04-29 Use protect() instead of Ref { } in beacon and applepay code
2026-04-29 ANGLE: Metal: Initialize missing fragment shader output components 2026-W17
2026-04-28 WebGL provoking vertex with uint16 primitive restart causes GPU OOB access 2026-W17
2026-04-28 Use protect() instead of Ref { } in storage and speech code
2026-04-28 Use protect() instead of Ref { } in push-api code
2026-04-28 Use protect() instead of Ref { } in notifications code
2026-04-28 Use protect() instead of Ref { } in reporting and remoteplayback code
2026-04-25 Use protect() instead of Ref { } in permissions, highlight, and webauthn code
2026-04-25 Remove vestigial `hasAudio`/`isMuted`/`setIsMuted` from `<model>` after 310669@main
2026-04-23 Use protect() instead of Ref { } in WebGL code
2026-04-23 Surfaces should not be marked volatile while preparing for display 2026-W16
2026-04-23 Use protect() instead of RetainPtr { } in WebGL code
2026-04-23 Reduce use of `.get()` for smart pointers in WebXRSystem
2026-04-23 Use `URL::operator==` in `HTMLModelElement::setEnvironmentMap`
2026-04-23 Use protect() instead of RefPtr { } in WebGL code
2026-04-21 Remove unnecessary RefPtr { } wrapper in WebXR code
2026-04-21 Use protect() instead of Ref { } in WebXR code
2026-04-18 [threaded-animations] Null timelinesController crash in scheduleAssociatedAcceleratedEffectStackUpdate during animation
2026-04-16 Use protect() instead of Ref { } in Source/WebKit/GPUProcess/graphics/WebGPU
2026-04-16 Use protect() instead of RefPtr { } in model element code
2026-04-16 Use protect() instead of Ref { } in model element code
2026-04-16 Use protect() instead of Ref { } in Source/WebGPU/WebGPU
2026-04-15 Use protect() instead of RefPtr { } in Source/WebKit/WebProcess/GPU/graphics/WebGPU
2026-04-15 Use protect() instead of RefPtr { } in Source/WebGPU/WebGPU
2026-04-14 Use protect() instead of Ref { } in Source/WebKit/WebProcess/GPU/graphics/WebGPU
2026-04-08 Use protect() instead of Ref { } in Source/WebKit/Shared/WebGPU
2026-04-07 Use protect() instead of RefPtr { } in Source/WebCore/Modules/WebGPU
2026-04-07 Use protect() instead of Ref { } in Source/WebCore/Modules/WebGPU
2026-03-23 [IFC] Crash in Content::lineEllipsis during partial layout with ellipsis content
2026-03-16 [SaferCPP] Fix some UncountedCallArgsChecker in Source/WebCore/dom/
2026-03-15 [SaferCPP] Fix some UncountedCallArgsChecker in Source/WebCore/css/
2026-03-13 OffscreenCanvas.transferToImageBitmap() crashes after navigation when WebGL context is lost
2026-03-12 [WGSL] Override validation crashes when expression is wrapped in __pack by GlobalVariableRewriter 2026-W10
2026-03-12 [FairPlay] Remove incorrect ASSERT_NOT_REACHED in externalProtectionStatusDidChangeForContentKey
2026-03-11 ANGLE: Add mutex to MakeStaticString to fix data race crash
2026-03-11 CDMSessionAVContentKeySession::isAnyKeyUsable should check that content key is available
2026-03-06 [Site Isolation] Fix redirect-https-to-http-iframe-in-main-frame mixed content test
2026-03-06 Use shouldBe assertions instead of console.log(FAIL) in mixed content and CSP upgrade-insecure-requests tests
2026-03-06 [Site Isolation] Remove duplicate mixed content layout tests
2026-03-04 Rename visitJSCustomElementInterfaces to visitJSCustomElementInterfacesInGCThread
2026-02-26 [SaferCPP] Fix all UncountedCallArgsChecker in Source/WebCore/contentextensions/
2026-02-26 [SaferCPP] Fix some UncountedCallArgsChecker in Source/WebCore/css/
2026-02-20 [SaferCPP] Fix some UncountedCallArgsChecker in Source/WebCore/css/typedom/
2026-02-18 ANGLE: Fix static_assert messages in GetPrimitiveRestartIndexFromType
2026-02-18 [SaferCPP] Fix some UncountedCallArgsChecker in Source/WebCore/Modules/webaudio/
2026-02-15 [SaferCPP] Fix UncountedCallArgsChecker in Source/WebCore/animation/ and adopt NODELETE in DOMWindow
2026-02-14 Fix GC thread terminology in comments to reflect multiple GC threads
2026-02-13 [SaferCPP] Fix some UncountedCallArgsChecker in Source/WebCore/Modules/
2026-02-13 [CoreIPC] Fix RetainPtr serialization by aliasing bare refs instead of RetainPtr<T>
2026-01-23 [Site Isolation] Fix iOS SI mixed content test failures
2026-01-15 Fix SI test failure fast/webgpu/nocrash/fuzz-295370.html
2026-01-06 Fix SI test expectation for webgl/2.0.y/conformance/textures/video/tex-2d-alpha-alpha-unsigned_byte.html
2025-12-22 Make m_registeredTimerLock an UnfairLock to prevent priority inversion
2025-12-19 Fix priority inversion in RunLoop::dispatch() by using UnfairLock
2025-12-17 Add user prompt before invoking ARQuickLook for 3D Asset Parsing
2025-12-12 [Site Isolation] Fix SI upgrade-insecure-requests test failures
2025-12-10 Remove old Level 1 mixed content test
2025-12-10 [Site Isolation] Fix SI referrer policy test failures
2025-12-10 [Site Isolation] Fix macOS SI mixed content test failures
2025-12-08 Add user prompt before invoking ARQuickLook for 3D Asset Parsing
2025-12-03 Downcast crash when grid item requests fullscreen with container-type parent
2025-11-24 Fix crash in style invalidation when element has no parent during removal
2025-11-21 [Site Isolation] Make MESSAGE_CHECK in commitLayerTree() robust against process swaps in Site Isolation
2025-11-20 Organize remaining RemoteLayerTreeTransaction members
2025-11-18 REGRESSION(302408@main?): [iOS Release ] http/tests/site-isolation/history/add-iframes-and-navigate-mainframe.html is a
2025-10-31 Migrate more RemoteLayerTreeTransaction members from transaction scope to main frame scope
2025-10-27 [Site Isolation] Adjust TestExpectations after 301066@main

1 / 8

← All Contributors