spenap
Platform contributor
Summary
spenap works almost entirely on the Linux-side ports — GLib/GTK/WPE platform glue, libsoup networking, TextureMapper/Skia graphics, and the CMake plumbing around them — with the WebCore work mostly reaching down into the same platform layers. The pattern is port-level lifecycle and syscall-error correctness rather than exploit-class bug fixing: EINTR/ENOSPC handling on eventfd and cache mmap writes, IPC decoding robustness and an encoder desync on certificate-extraction failure, and a tight EME cluster covering MediaKeySession teardown deferral, concurrent `sessionClosed` calls, and a crash pruning a back/forward-cached page that still owns an open session. Systematic-variant candidate: the MediaKeySession lifetime work landed as three fixes in the same week, which suggests the CDM-session ownership graph across BFCache eviction and page teardown was only partially swept — adjacent GStreamer-backed media objects with the same cross-process ownership shape are the natural place to look for the rest.
Components
Security Fix History
Hardening Commits
- No hardening commits recorded
Recent Commits
- 2026-07-30 [GTK][WPE] Gardening of tests - 2026-07-30
- 2026-07-09 [OpenXR] Instance is never released when no session is started
- 2026-07-09 [GLib] Add per-navigation custom User-Agent to WebKitWebsitePolicies
- 2026-06-26 Regression(278316@main): [GLIB] IPC encoder desyncs on certificate extraction failure
- 2026-06-24 [GTK][WPE] Increase the libsoup idle connection timeout to 115 seconds
- 2026-06-10 [CMake][GTK][WPE] Detect FreeType's builtin WOFF2 support on Skia builds
- 2026-06-03 REGRESSION(314352@main): [EME] Deferring MediaKeySession teardown leaks the CDM session into the next test
- 2026-06-02 [EME] Crash pruning a back/forward-cached page that owns an open MediaKeySession
- 2026-06-02 [EME] Protect MediaKeySession::sessionClosed from concurrent calls
- 2026-06-02 ASSERTION FAILED: it != m_querySelectorAllResults.end() - clearQuerySelectorAllResults() leaves stale per-node HasValidQ
- 2026-05-28 [EME] getSupportedCapabilitiesForAudioVideoType can accidentally include unsupported capabilities
- 2026-05-07 [TextureMapper] Round-clip shader needs highp on PowerVR B-Series
- 2026-05-05 [Linux] Handle ENOSPC on NetworkProcess cache mmap writes
- 2026-05-05 [GLib] webkit://gpu: Guard GL queries against missing EGL context
- 2026-04-21 [GLib] Set real time limits for the sched_setscheduler path