Changeset 287011 in webkit

Timestamp:

Dec 13, 2021, 8:55:38 PM (5 years ago)

Author:

Kate Cheney

Message:

WebContent process crashes at ContentSecurityPolicySourceList::matchesAll
​https://bugs.webkit.org/show_bug.cgi?id=234288
rdar://problem/86438924

Reviewed by Simon Fraser.

• page/csp/ContentSecurityPolicyDirectiveList.cpp:

(WebCore::ContentSecurityPolicyDirectiveList::violatedDirectiveForScript const):

Location:

trunk/Source/WebCore

Files:

• ChangeLog (modified) (1 diff)
• page/csp/ContentSecurityPolicyDirectiveList.cpp (modified) (1 diff)

trunk/Source/WebCore/ChangeLog

@@ +1 @@
+2021-12-13  Kate Cheney  <katherine_cheney@apple.com>
+
+        WebContent process crashes at ContentSecurityPolicySourceList::matchesAll
+        https://bugs.webkit.org/show_bug.cgi?id=234288
+        rdar://problem/86438924
+
+        Reviewed by Simon Fraser.
+
+        * page/csp/ContentSecurityPolicyDirectiveList.cpp:
+        (WebCore::ContentSecurityPolicyDirectiveList::violatedDirectiveForScript const):
+
 2021-12-13  Alex Christensen  <achristensen@webkit.org>
 

trunk/Source/WebCore/page/csp/ContentSecurityPolicyDirectiveList.cpp

@@ -392 +392 @@
     auto* operativeDirective = this->operativeDirective(m_scriptSrc.get(), ContentSecurityPolicyDirectiveNames::scriptSrcElem);
 
-    if (operativeDirective->containsAllHashes(subResourceIntegrityDigests))
+    if (!operativeDirective || operativeDirective->containsAllHashes(subResourceIntegrityDigests))
         return nullptr;