rwlbuis
WebCore security specialist
Summary
Primarily WebCore rendering, with the bulk of the work in the layer-based SVG engine (LBSE) migration — converting RenderSVG* code paths for non-layered elements, filter and clip-path handling, and resource invalidation — alongside CSS block-ellipsis/line-clamp work. Notably, the security fixes don't overlap with that day job: they land in loader and form-submission paths (ASAN SEGV in `DocumentLoader::urlForHistory`, ASAN ILL in `FormState::create`/`FormSubmission`), plus a cherry-pick from an embargoed branch, suggesting fuzzer-reported crash triage separate from the SVG refactor. Where to look next: the LBSE non-layered conversion is a mid-flight rendering-model change touching clip-path computation, filter scaling, and resource invalidation — historically fertile ground for lifetime and stale-reference bugs, and the recurring `resource-invalidation-crash` fixes mark it as an active hotspot.
Components
Security Fix History
- 2026-04-28 [WebKit][Main+SU] [3473ae787b8859f0] ASAN_SEGV | WebCore::DocumentLoader::urlForHistory; WebCore::HistoryController::upd 2026-W17
- 2026-03-07 Cherry-pick 302196.2@webkit-2025.11-embargoed (6c8a256d475b). rdar://137178583
- 2026-03-04 [WebKit][Main+SU] [ea2e11e05711c082] ASAN_ILL | WebCore::FormState::create; WebCore::FormSubmission::create; WebCore::HT
Hardening Commits
- No hardening commits recorded
Recent Commits
- 2026-08-03 [LBSE] Correct SVG filter and resource-buffer painting for non-layered renderers
- 2026-08-03 Style the block-overflow ellipsis based on the root block fc
- 2026-07-17 Fix css/css-overflow/line-clamp/block-ellipsis-024.html
- 2026-07-09 Support block-ellipsis:no-ellipsis
- 2026-07-06 [LBSE] Adjust test expectations after 315946@main
- 2026-06-30 Fix some failures in imported/w3c/web-platform-tests/svg/styling
- 2026-06-30 Fix animateMotion-spline-invalid-keyTimes.html
- 2026-06-19 Fix svg/animations/svgpointlist-animation-invalid-value-1.html
- 2026-06-06 Make BasicShape evaluation take a FloatRect
- 2026-06-04 [LBSE] Improve test results
- 2026-06-03 [LBSE] Fix svg/W3C-SVG-1.1/filters-conv-01-f.svg
- 2026-06-03 Add AcceleratedEffectClipPath
- 2026-05-28 [LBSE] Fix filter scaling
- 2026-05-21 [LBSE] Fix svg/custom/resource-invalidation-crash
- 2026-05-20 [LBSE] Prepare RenderSVGModelObject.cpp for non-layered SVG elements