← All issues

[28] ModelProcess ASSERT promoted to MESSAGE_CHECK for duplicate identifier

Severity: Low | Component: WebKit ModelProcess | 69ff7c4

ModelProcessModelPlayerManagerProxy::createModelPlayer에서 renderer-supplied identifier에 대한 debug 전용 ASSERT를 release 빌드의 MESSAGE_CHECK로 격상한 diff로, Low로 평가되었습니다. deleteModelPlayer/unloadModelPlayer에도 대칭적인 check가 추가되었습니다.

Source/WebKit/ModelProcess/ModelProcessModelPlayerManagerProxy.cpp

+#define MESSAGE_CHECK(assertion) MESSAGE_CHECK_BASE(assertion, m_modelConnectionToWebProcess->connection())
...
- ASSERT(!m_proxies.contains(identifier));
+ MESSAGE_CHECK(!m_proxies.contains(identifier));

IPC로 전달된 identifier 검증을 debug 전용 ASSERT에만 의존하여, 실제 배포 바이너리에서는 경계 검사가 존재하지 않는 패턴.

🔒

The release-build consequence of a debug-only invariant check at an IPC boundary, and how far the resulting state confusion could plausibly travel.

더 확인하려면 구독해 주세요

🔒

Multiple reusable audit patterns identified for finding ASSERT-vs-MESSAGE_CHECK gaps across several auxiliary-process IPC surfaces.

더 확인하려면 구독해 주세요