mirrors/ladybird
0
0
Fork 0
mirror of https://github.com/LadybirdBrowser/ladybird.git synced 2025-07-07 17:41:54 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 10

LibWeb: Do not capture local lambda by reference in HTMLTrackElement

Browse source 
This is UAF. It will cause a crash in an upcoming commit.
This commit is contained in:
Timothy Flynn 2025-06-12 08:31:30 -04:00 • committed by Tim Flynn
parent c6a94fe513
commit 8da6731048
Notes: github-actions[bot] 2025-06-12 16:27:04 +00:00
2 changed files with 16 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

2
Libraries/LibWeb/HTML/HTMLTrackElement.h
View file

@ -35,6 +35,8 @@ private:
void start_the_track_processing_model();
void start_the_track_processing_model_parallel_steps(JS::Realm& realm);
void track_failed_to_load();
// ^DOM::Element
virtual void attribute_changed(FlyString const& name, Optional<String> const& old_value, Optional<String> const& value, Optional<FlyString> const& namespace_) override;
virtual void inserted() override;