Accepting request 1302840 from GNOME:Factory

OBS-URL: https://build.opensuse.org/request/show/1302840
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/webkit2gtk3?expand=0&rev=227

63f7badbada070ebaadd318b2801818ecf7e7ea0.patch

@@ -1,31 +0,0 @@
-From 63f7badbada070ebaadd318b2801818ecf7e7ea0 Mon Sep 17 00:00:00 2001
-From: Don Olmstead <don.olmstead@sony.com>
-Date: Sat, 26 Oct 2024 08:27:01 -0700
-Subject: [PATCH] Support ICU 76.1 build
- https://bugs.webkit.org/show_bug.cgi?id=282120
-
-Reviewed by Yusuke Suzuki.
-
-In ICU 76.1 an additional macro `U_SHOW_CPLUSPLUS_HEADER_API` was added to
-control visibility of the C++ API within ICU. Set this value to `0` since WebKit
-wants to only use the C API.
-
-* Source/WTF/wtf/Platform.h:
-
-Canonical link: https://commits.webkit.org/285727@main
----
- Source/WTF/wtf/Platform.h | 1 +
- 1 file changed, 1 insertion(+)
-
-diff --git a/Source/WTF/wtf/Platform.h b/Source/WTF/wtf/Platform.h
-index 23070df2937ba..51a8dce97755e 100644
---- a/Source/WTF/wtf/Platform.h
-+++ b/Source/WTF/wtf/Platform.h
-@@ -115,6 +115,7 @@
- /* ICU configuration. Some of these match ICU defaults on some platforms, but we would like them consistently set everywhere we build WebKit. */
- #define U_HIDE_DEPRECATED_API 1
- #define U_SHOW_CPLUSPLUS_API 0
-+#define U_SHOW_CPLUSPLUS_HEADER_API 0
- #ifdef __cplusplus
- #define UCHAR_TYPE char16_t
- #endif

8bee9eb9.patch

@@ -1,28 +0,0 @@
-From 8bee9eb95ae24c6a410f9cd614976f4653d020d9 Mon Sep 17 00:00:00 2001
-From: Michael Catanzaro <mcatanzaro@redhat.com>
-Date: Wed, 2 Apr 2025 15:01:55 -0500
-Subject: [PATCH] REGRESSION(290945.129@webkitglib/2.48): Broke non-x86,
- non-ARM builds https://bugs.webkit.org/show_bug.cgi?id=287662
-
-Unreviewed stable branch build fix.
-
-* Source/WebCore/platform/audio/DenormalDisabler.cpp:
-
-Canonical link: https://commits.webkit.org/290945.155@webkitglib/2.48
----
- Source/WebCore/platform/audio/DenormalDisabler.cpp | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/Source/WebCore/platform/audio/DenormalDisabler.cpp b/Source/WebCore/platform/audio/DenormalDisabler.cpp
-index 35715e663ce7e..44ba08a33d5d9 100644
---- a/Source/WebCore/platform/audio/DenormalDisabler.cpp
-+++ b/Source/WebCore/platform/audio/DenormalDisabler.cpp
-@@ -91,7 +91,7 @@ DenormalDisabler::~DenormalDisabler()
-     }
- }
- #else
--DenormalDisabler::DenormalDisabler() = default
-+DenormalDisabler::DenormalDisabler() = default;
- DenormalDisabler::~DenormalDisabler() = default;
- #endif
- 

9d5844679af8f84036f1b800307e799bd7ab73ba.patch

@@ -1,59 +0,0 @@
-From 9d5844679af8f84036f1b800307e799bd7ab73ba Mon Sep 17 00:00:00 2001
-From: Philippe Normand <philn@igalia.com>
-Date: Thu, 20 Jun 2024 12:39:27 -0700
-Subject: [PATCH] [GTK][GStreamer] VA+DMABuf videos flicker
- https://bugs.webkit.org/show_bug.cgi?id=253807
-
-Reviewed by Xabier Rodriguez-Calvar.
-
-By requesting a video frame allocation pool containing at least 3 frames, the risks of flickering
-when rendering should be reduced.
-
-* Source/WebCore/platform/graphics/gstreamer/GStreamerVideoSinkCommon.cpp:
-(WebKitVideoSinkProbe::doProbe):
-
-Canonical link: https://commits.webkit.org/280210@main
----
- .../gstreamer/GStreamerVideoSinkCommon.cpp    | 29 +++++++++++++++++--
- 1 file changed, 27 insertions(+), 2 deletions(-)
-
-diff --git a/Source/WebCore/platform/graphics/gstreamer/GStreamerVideoSinkCommon.cpp b/Source/WebCore/platform/graphics/gstreamer/GStreamerVideoSinkCommon.cpp
-index dc3f912e11d8..b2ddaad303e8 100644
---- a/Source/WebCore/platform/graphics/gstreamer/GStreamerVideoSinkCommon.cpp
-+++ b/Source/WebCore/platform/graphics/gstreamer/GStreamerVideoSinkCommon.cpp
-@@ -73,8 +73,33 @@ class WebKitVideoSinkProbe {
-             player->updateVideoOrientation(tagList);
-         }
- 
--        if (info->type & GST_PAD_PROBE_TYPE_QUERY_DOWNSTREAM && GST_QUERY_TYPE(GST_PAD_PROBE_INFO_QUERY(info)) == GST_QUERY_ALLOCATION)
--            gst_query_add_allocation_meta(GST_PAD_PROBE_INFO_QUERY(info), GST_VIDEO_META_API_TYPE, nullptr);
-+        if (info->type & GST_PAD_PROBE_TYPE_QUERY_DOWNSTREAM && GST_QUERY_TYPE(GST_PAD_PROBE_INFO_QUERY(info)) == GST_QUERY_ALLOCATION) {
-+            auto query = GST_PAD_PROBE_INFO_QUERY(info);
-+            gst_query_add_allocation_meta(query, GST_VIDEO_META_API_TYPE, nullptr);
-+
-+            GstCaps* caps;
-+            gboolean needPool;
-+            gst_query_parse_allocation(query, &caps, &needPool);
-+            if (UNLIKELY(!caps) || !needPool)
-+                return GST_PAD_PROBE_OK;
-+
-+            unsigned size;
-+#if GST_CHECK_VERSION(1, 24, 0)
-+            if (gst_video_is_dma_drm_caps(caps)) {
-+                GstVideoInfoDmaDrm drmInfo;
-+                if (!gst_video_info_dma_drm_from_caps(&drmInfo, caps))
-+                    return GST_PAD_PROBE_OK;
-+                size = GST_VIDEO_INFO_SIZE(&drmInfo.vinfo);
-+            } else
-+#endif
-+            {
-+                GstVideoInfo info;
-+                if (!gst_video_info_from_caps(&info, caps))
-+                    return GST_PAD_PROBE_OK;
-+                size = GST_VIDEO_INFO_SIZE(&info);
-+            }
-+            gst_query_add_allocation_pool(query, nullptr, size, 3, 0);
-+        }
- 
- #if USE(GSTREAMER_GL)
-         // FIXME: Verify the following comment. Investigate what actually should be done here.

9e9ea966373d3858668f6a29d8ba91a5807c8dd8.patch

@@ -1,41 +0,0 @@
-From 9e9ea966373d3858668f6a29d8ba91a5807c8dd8 Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?Th=C3=A9o=20Maillart?= <tmaillart@freebox.fr>
-Date: Fri, 8 Nov 2024 09:50:53 -0800
-Subject: [PATCH] [GStreamer] Video dimensions are wrong since GStreamer 1.24.9
- https://bugs.webkit.org/show_bug.cgi?id=282749
-
-Reviewed by Philippe Normand.
-
-With the latest version of GStreamer, if the source is not selectable,
-uridecodebin3 will drop the stream collection emitted from this element
-As we only consider stream collection from the source element, we will
-never set the stream collection internally, this will produce faulty
-behaviour such as using wrong video dimensions
-To avoid that, we reply true to the selectable query
-
-* Source/WebCore/platform/graphics/gstreamer/mse/WebKitMediaSourceGStreamer.cpp:
-(webKitMediaSrcQuery):
-
-Canonical link: https://commits.webkit.org/286347@main
----
- .../graphics/gstreamer/mse/WebKitMediaSourceGStreamer.cpp  | 7 +++++++
- 1 file changed, 7 insertions(+)
-
-diff --git a/Source/WebCore/platform/graphics/gstreamer/mse/WebKitMediaSourceGStreamer.cpp b/Source/WebCore/platform/graphics/gstreamer/mse/WebKitMediaSourceGStreamer.cpp
-index c0a67c5f23f25..45b4f160e5630 100644
---- a/Source/WebCore/platform/graphics/gstreamer/mse/WebKitMediaSourceGStreamer.cpp
-+++ b/Source/WebCore/platform/graphics/gstreamer/mse/WebKitMediaSourceGStreamer.cpp
-@@ -255,6 +255,13 @@ static const char* streamTypeToString(TrackPrivateBaseGStreamer::TrackType type)
- 
- static gboolean webKitMediaSrcQuery(GstElement* element, GstQuery* query)
- {
-+#if GST_CHECK_VERSION(1, 22, 0)
-+    if (GST_QUERY_TYPE(query) == GST_QUERY_SELECTABLE) {
-+        gst_query_set_selectable(query, TRUE);
-+        return TRUE;
-+    }
-+#endif
-+
-     gboolean result = GST_ELEMENT_CLASS(parent_class)->query(element, query);
- 
-     if (GST_QUERY_TYPE(query) != GST_QUERY_SCHEDULING)

bug281492.patch

@@ -1,94 +0,0 @@
-From 984e2a6b7a92b8c144f2b4463f5904e449cb3cc1 Mon Sep 17 00:00:00 2001
-From: Georges Basile Stavracas Neto <feaneron@igalia.com>
-Date: Tue, 15 Oct 2024 11:44:23 -0300
-Subject: [PATCH] AX: [GTK]: Fix crash in
- AccessibilityObjectAtspi::textAttributes
- https://bugs.webkit.org/show_bug.cgi?id=281492
-
-Reviewed by NOBODY (OOPS!).
-
-In the AccessibilityObjectAtspi::textAttributes() method, the
-accessibilityTextAttributes() function is called for various AXObjects.
-These objects are retrived by querying the AXObjectCache of the
-document.
-
-However, the cache can legitimately return nullptr when the AXObject is
-not cached. The AccessibilityObjectAtspi::textAttributes() method did
-not check for nullptr, and the accessibilityTextAttributes() function
-is not nullptr safe.
-
-This crashes.
-
-Make AccessibilityObjectAtspi::textAttributes() check if the AXObject
-is a nullptr before passing it down to accessibilityTextAttributes().
-
-* Source/WebCore/accessibility/atspi/AccessibilityObjectTextAtspi.cpp:
-(WebCore::AccessibilityObjectAtspi::textAttributes const):
----
- .../atspi/AccessibilityObjectTextAtspi.cpp    | 21 ++++++++++++++++---
- 1 file changed, 18 insertions(+), 3 deletions(-)
-
-diff --git a/Source/WebCore/accessibility/atspi/AccessibilityObjectTextAtspi.cpp b/Source/WebCore/accessibility/atspi/AccessibilityObjectTextAtspi.cpp
-index 50b4f58be2f3..a49bfd939716 100644
---- a/Source/WebCore/accessibility/atspi/AccessibilityObjectTextAtspi.cpp
-+++ b/Source/WebCore/accessibility/atspi/AccessibilityObjectTextAtspi.cpp
-@@ -38,6 +38,7 @@
- #include "TextIterator.h"
- #include "VisibleUnits.h"
- #include <gio/gio.h>
-+#include <wtf/Assertions.h>
- #include <wtf/unicode/CharacterNames.h>
- 
- namespace WebCore {
-@@ -763,6 +764,9 @@ AccessibilityObjectAtspi::TextAttributes AccessibilityObjectAtspi::textAttribute
- 
-     auto accessibilityTextAttributes = [this](AXCoreObject* axObject, const HashMap<String, String>& defaultAttributes) -> HashMap<String, String> {
-         HashMap<String, String> attributes;
-+
-+        RELEASE_ASSERT(axObject);
-+
-         auto& style = axObject->renderer()->style();
- 
-         auto addAttributeIfNeeded = [&](const String& name, const String& value) {
-@@ -838,8 +842,11 @@ AccessibilityObjectAtspi::TextAttributes AccessibilityObjectAtspi::textAttribute
-         return { WTFMove(defaultAttributes), -1, -1 };
- 
-     if (!*utf16Offset && m_hasListMarkerAtStart) {
-+        auto axObject = m_coreObject->children()[0].get();
-+        RELEASE_ASSERT(axObject);
-+
-         // Always consider list marker an independent run.
--        auto attributes = accessibilityTextAttributes(m_coreObject->children()[0].get(), defaultAttributes);
-+        auto attributes = accessibilityTextAttributes(axObject, defaultAttributes);
-         if (!includeDefault)
-             return { WTFMove(attributes), 0, 1 };
- 
-@@ -871,7 +878,11 @@ AccessibilityObjectAtspi::TextAttributes AccessibilityObjectAtspi::textAttribute
-         if (r->firstChildSlow())
-             continue;
- 
--        auto childAttributes = accessibilityTextAttributes(r->document().axObjectCache()->get(r), defaultAttributes);
-+        auto axObject = r->document().axObjectCache()->get(r);
-+        if (!axObject)
-+            continue;
-+
-+        auto childAttributes = accessibilityTextAttributes(axObject, defaultAttributes);
-         if (childAttributes != attributes)
-             break;
- 
-@@ -885,7 +896,11 @@ AccessibilityObjectAtspi::TextAttributes AccessibilityObjectAtspi::textAttribute
-         if (r->firstChildSlow())
-             continue;
- 
--        auto childAttributes = accessibilityTextAttributes(r->document().axObjectCache()->get(r), defaultAttributes);
-+        auto axObject = r->document().axObjectCache()->get(r);
-+        if (!axObject)
-+            continue;
-+
-+        auto childAttributes = accessibilityTextAttributes(axObject, defaultAttributes);
-         if (childAttributes != attributes)
-             break;
- 
--- 
-2.46.1
-

bug281495.patch

@@ -1,84 +0,0 @@
-From 8fd152326050b81559903682e0767d289adef9cb Mon Sep 17 00:00:00 2001
-From: Michael Catanzaro <mcatanzaro@redhat.com>
-Date: Wed, 16 Oct 2024 13:45:39 -0500
-Subject: [PATCH] REGRESSION(283414@main): [WPE][GTK] Crash in ProcessLauncher
- socket monitor callback https://bugs.webkit.org/show_bug.cgi?id=281495
-
-Reviewed by NOBODY (OOPS!).
-
-The socket monitor callback that I added in 283414@main accidentally
-deletes itself by calling m_socketMonitor.stop(). This causes the lambda
-capture to itself be deleted. We can change the socket monitor to wait
-until the callback has finished before deleting it.
-
-* Source/WTF/wtf/glib/GSocketMonitor.cpp:
-(WTF::GSocketMonitor::~GSocketMonitor):
-(WTF::GSocketMonitor::socketSourceCallback):
-(WTF::GSocketMonitor::stop):
----
- Source/WTF/wtf/glib/GSocketMonitor.cpp | 21 +++++++++++++++++++--
- Source/WTF/wtf/glib/GSocketMonitor.h   |  2 ++
- 2 files changed, 21 insertions(+), 2 deletions(-)
-
-diff --git a/Source/WTF/wtf/glib/GSocketMonitor.cpp b/Source/WTF/wtf/glib/GSocketMonitor.cpp
-index c88ea9f91ca4..f3e31efb5053 100644
---- a/Source/WTF/wtf/glib/GSocketMonitor.cpp
-+++ b/Source/WTF/wtf/glib/GSocketMonitor.cpp
-@@ -33,6 +33,7 @@ namespace WTF {
- 
- GSocketMonitor::~GSocketMonitor()
- {
-+    RELEASE_ASSERT(!m_isExecutingCallback);
-     stop();
- }
- 
-@@ -40,7 +41,17 @@ gboolean GSocketMonitor::socketSourceCallback(GSocket*, GIOCondition condition,
- {
-     if (g_cancellable_is_cancelled(monitor->m_cancellable.get()))
-         return G_SOURCE_REMOVE;
--    return monitor->m_callback(condition);
-+
-+    monitor->m_isExecutingCallback = true;
-+    gboolean result = monitor->m_callback(condition);
-+    monitor->m_isExecutingCallback = false;
-+
-+    if (monitor->m_shouldDestroyCallback) {
-+        monitor->m_callback = nullptr;
-+        monitor->m_shouldDestroyCallback = false;
-+    }
-+
-+    return result;
- }
- 
- void GSocketMonitor::start(GSocket* socket, GIOCondition condition, RunLoop& runLoop, Function<gboolean(GIOCondition)>&& callback)
-@@ -65,7 +76,13 @@ void GSocketMonitor::stop()
-     m_cancellable = nullptr;
-     g_source_destroy(m_source.get());
-     m_source = nullptr;
--    m_callback = nullptr;
-+
-+    // It's normal to stop the socket monitor from inside its callback.
-+    // Don't destroy the callback while it's still executing.
-+    if (m_isExecutingCallback)
-+        m_shouldDestroyCallback = true;
-+    else
-+        m_callback = nullptr;
- }
- 
- } // namespace WTF
-diff --git a/Source/WTF/wtf/glib/GSocketMonitor.h b/Source/WTF/wtf/glib/GSocketMonitor.h
-index 7ec383a6e37c..9393c546b593 100644
---- a/Source/WTF/wtf/glib/GSocketMonitor.h
-+++ b/Source/WTF/wtf/glib/GSocketMonitor.h
-@@ -51,6 +51,8 @@ private:
-     GRefPtr<GSource> m_source;
-     GRefPtr<GCancellable> m_cancellable;
-     Function<gboolean(GIOCondition)> m_callback;
-+    bool m_isExecutingCallback { false };
-+    bool m_shouldDestroyCallback { false };
- };
- 
- } // namespace WTF
--- 
-2.46.1
-

revert-271175.patch

@@ -1,47 +0,0 @@
-From 9140ce712aa87091613874d802787ab476be0e39 Mon Sep 17 00:00:00 2001
-From: Michael Catanzaro <mcatanzaro@redhat.com>
-Date: Wed, 14 Aug 2024 14:58:05 -0500
-Subject: [PATCH] Revert "Cherry-pick 272448.770@safari-7618-branch
- (6d311cd7fefc). https://bugs.webkit.org/show_bug.cgi?id=271175"
- https://bugs.webkit.org/show_bug.cgi?id=278113
-
-This reverts commit 279c9d7963182cc35cf4e0bfebe87df2d83eaef8.
-
-This broke wasm, and I don't know how to fix it.
-
-Canonical link: https://commits.webkit.org/274313.373@webkitglib/2.44
----
- .../stress/many-calls-results-on-stack.js     | 39 -------------------
- Source/JavaScriptCore/wasm/WasmBBQJIT.cpp     | 19 ---------
- 2 files changed, 58 deletions(-)
- delete mode 100644 JSTests/wasm/stress/many-calls-results-on-stack.js
-
-index 9049865e8ce7..3f142cf5e90f 100644
---- a/Source/JavaScriptCore/wasm/WasmBBQJIT.cpp
-+++ b/Source/JavaScriptCore/wasm/WasmBBQJIT.cpp
-@@ -3958,25 +3958,6 @@ void BBQJIT::returnValuesFromCall(Vector<Value, N>& results, const FunctionSigna
-                     ASSERT(m_validFPRs.contains(returnLocation.asFPR(), Width::Width128));
-                     m_fprSet.add(returnLocation.asFPR(), Width::Width128);
-                 }
--            } else {
--                ASSERT(returnLocation.isStackArgument());
--                // FIXME: Ideally, we would leave these values where they are but a subsequent call could clobber them before they are used.
--                // That said, stack results are very rare so this isn't too painful.
--                // Even if we did leave them where they are, we'd need to flush them to their canonical location at the next branch otherwise
--                // we could have something like (assume no result regs for simplicity):
--                // call (result i32 i32) $foo
--                // if (result i32) // Stack: i32(StackArgument:8) i32(StackArgument:0)
--                //   // Stack: i32(StackArgument:8)
--                // else
--                //   call (result i32 i32) $bar // Stack: i32(StackArgument:8) we have to flush the stack argument to make room for the result of bar
--                //   drop // Stack: i32(Stack:X) i32(StackArgument:8) i32(StackArgument:0)
--                //   drop // Stack: i32(Stack:X) i32(StackArgument:8)
--                // end
--                // return // Stack i32(*Conflicting locations*)
--
--                Location canonicalLocation = canonicalSlot(result);
--                emitMoveMemory(result.type(), returnLocation, canonicalLocation);
--                returnLocation = canonicalLocation;
-             }
-         }
-         bind(result, returnLocation);

webkit2gtk3-CVE-2024-40776.patch

@@ -1,165 +0,0 @@
-From b951404ea74ae432312a83138f5c8945a0d09e1b Mon Sep 17 00:00:00 2001
-From: Jean-Yves Avenard <jya@apple.com>
-Date: Wed, 24 Apr 2024 19:01:06 -0700
-Subject: [PATCH] Cherry-pick 272448.960@safari-7618-branch (b7ccdb65258e).
- https://bugs.webkit.org/show_bug.cgi?id=273176
-
-Always copy all audio channels to the AudioBus to guarantee data lifetime.
-https://bugs.webkit.org/show_bug.cgi?id=273176
-rdar://125166710
-
-Reviewed by Chris Dumez.
-
-Following 275262@main, a task is dispatched on the audio render thread.
-This task dispatch takes a reference to the source and destination AudioBus
-however when a MultiChannelResampler is in use, the source AudioBus may
-contain a raw pointer to the resampled's AudioArray and the lifetime of
-this object may be shorter than the AudioBus.
-
-In 232182@main, a speed and memory optimisation was added by passed-in buffer
-as memory for the first channel in the AudioBus.
-We revert this change for now and copy all channels' data to the AudioBus.
-
-Added test.
-
-* LayoutTests/webaudio/crashtest/audioworklet-concurrent-resampler-crash-expected.txt: Added.
-* LayoutTests/webaudio/crashtest/audioworklet-concurrent-resampler-crash.html: Added.
-* Source/WebCore/platform/audio/MultiChannelResampler.cpp:
-(WebCore::MultiChannelResampler::MultiChannelResampler):
-(WebCore::MultiChannelResampler::provideInputForChannel):
-* Source/WebCore/platform/audio/MultiChannelResampler.h:
-
-Canonical link: https://commits.webkit.org/274313.332@webkitglib/2.44
----
- ...et-concurrent-resampler-crash-expected.txt |  1 +
- ...dioworklet-concurrent-resampler-crash.html | 44 +++++++++++++++++++
- .../platform/audio/MultiChannelResampler.cpp  | 23 ++--------
- .../platform/audio/MultiChannelResampler.h    |  2 -
- 4 files changed, 48 insertions(+), 22 deletions(-)
- create mode 100644 LayoutTests/webaudio/crashtest/audioworklet-concurrent-resampler-crash-expected.txt
- create mode 100644 LayoutTests/webaudio/crashtest/audioworklet-concurrent-resampler-crash.html
-
-diff --git a/LayoutTests/webaudio/crashtest/audioworklet-concurrent-resampler-crash-expected.txt b/LayoutTests/webaudio/crashtest/audioworklet-concurrent-resampler-crash-expected.txt
-new file mode 100644
-index 000000000000..654ddf7f17ef
---- /dev/null
-+++ b/LayoutTests/webaudio/crashtest/audioworklet-concurrent-resampler-crash-expected.txt
-@@ -0,0 +1 @@
-+This test passes if it does not crash.
-diff --git a/LayoutTests/webaudio/crashtest/audioworklet-concurrent-resampler-crash.html b/LayoutTests/webaudio/crashtest/audioworklet-concurrent-resampler-crash.html
-new file mode 100644
-index 000000000000..b3ab181d4787
---- /dev/null
-+++ b/LayoutTests/webaudio/crashtest/audioworklet-concurrent-resampler-crash.html
-@@ -0,0 +1,44 @@
-+<html>
-+<head>
-+    <script>
-+        let worklet_source = `
-+            class Processor extends AudioWorkletProcessor {
-+                process(inputs, outputs, parameters) {
-+                    return true;
-+                }
-+            }
-+            registerProcessor('P2', Processor);
-+        `;
-+
-+        let blob = new Blob([worklet_source], { type: 'application/javascript' });
-+        let worklet = URL.createObjectURL(blob);
-+
-+        var ctx = new AudioContext({ sampleRate: 44100});
-+        const dest = ctx.destination;
-+        dest.channelCountMode = "max";
-+
-+        async function main() {
-+            await ctx.audioWorklet.addModule(worklet);
-+            var script_processor = ctx.createScriptProcessor();
-+            script_processor.onaudioprocess = function() {
-+                dest.channelCount = 1;
-+                audio_worklet.disconnect();
-+                if (window.testRunner)
-+                    testRunner.notifyDone();
-+            }
-+            var audio_worklet = new AudioWorkletNode(ctx, "P2");
-+            script_processor.connect(audio_worklet);
-+            audio_worklet.connect(dest);
-+        }
-+    </script>
-+</head>
-+<body onload="main()">
-+    <p>This test passes if it does not crash.</p>
-+    <script>
-+    if (window.testRunner) {
-+        testRunner.waitUntilDone();
-+        testRunner.dumpAsText();
-+    }
-+    </script>
-+</body>
-+</html>
-diff --git a/Source/WebCore/platform/audio/MultiChannelResampler.cpp b/Source/WebCore/platform/audio/MultiChannelResampler.cpp
-index e5a0cfc10caa..c44df274cbbc 100644
---- a/Source/WebCore/platform/audio/MultiChannelResampler.cpp
-+++ b/Source/WebCore/platform/audio/MultiChannelResampler.cpp
-@@ -42,19 +42,8 @@ namespace WebCore {
- MultiChannelResampler::MultiChannelResampler(double scaleFactor, unsigned numberOfChannels, unsigned requestFrames, Function<void(AudioBus*, size_t framesToProcess)>&& provideInput)
-     : m_numberOfChannels(numberOfChannels)
-     , m_provideInput(WTFMove(provideInput))
--    , m_multiChannelBus(AudioBus::create(numberOfChannels, requestFrames, false))
-+    , m_multiChannelBus(AudioBus::create(numberOfChannels, requestFrames))
- {
--    // As an optimization, we will use the buffer passed to provideInputForChannel() as channel memory for the first channel so we
--    // only need to allocate memory if there is more than one channel.
--    if (numberOfChannels > 1) {
--        m_channelsMemory = Vector<std::unique_ptr<AudioFloatArray>>(numberOfChannels - 1, [&](size_t i) {
--            size_t channelIndex = i + 1;
--            auto floatArray = makeUnique<AudioFloatArray>(requestFrames);
--            m_multiChannelBus->setChannelMemory(channelIndex, floatArray->data(), requestFrames);
--            return floatArray;
--        });
--    }
--
-     // Create each channel's resampler.
-     m_kernels = Vector<std::unique_ptr<SincResampler>>(numberOfChannels, [&](size_t channelIndex) {
-         return makeUnique<SincResampler>(scaleFactor, requestFrames, std::bind(&MultiChannelResampler::provideInputForChannel, this, std::placeholders::_1, std::placeholders::_2, channelIndex));
-@@ -93,16 +82,10 @@ void MultiChannelResampler::process(AudioBus* destination, size_t framesToProces
- void MultiChannelResampler::provideInputForChannel(std::span<float> buffer, size_t framesToProcess, unsigned channelIndex)
- {
-     ASSERT(channelIndex < m_multiChannelBus->numberOfChannels());
--    ASSERT(framesToProcess == m_multiChannelBus->length());
-+    ASSERT(framesToProcess <= m_multiChannelBus->length());
- 
--    if (!channelIndex) {
--        // As an optimization, we use the provided buffer as memory for the first channel in the AudioBus. This avoids
--        // having to memcpy() for the first channel.
--        RELEASE_ASSERT(framesToProcess <= buffer.size());
--        m_multiChannelBus->setChannelMemory(0, buffer.data(), framesToProcess);
-+    if (!channelIndex)
-         m_provideInput(m_multiChannelBus.get(), framesToProcess);
--        return;
--    }
- 
-     // Copy the channel data from what we received from m_multiChannelProvider.
-     memcpySpan(buffer.subspan(0, framesToProcess), m_multiChannelBus->channel(channelIndex)->span().subspan(0, framesToProcess));
-diff --git a/Source/WebCore/platform/audio/MultiChannelResampler.h b/Source/WebCore/platform/audio/MultiChannelResampler.h
-index 25d43100b71f..214ee06567ac 100644
---- a/Source/WebCore/platform/audio/MultiChannelResampler.h
-+++ b/Source/WebCore/platform/audio/MultiChannelResampler.h
-@@ -29,7 +29,6 @@
- #ifndef MultiChannelResampler_h
- #define MultiChannelResampler_h
- 
--#include "AudioArray.h"
- #include <memory>
- #include <wtf/Function.h>
- #include <wtf/Vector.h>
-@@ -62,7 +61,6 @@ private:
-     size_t m_outputFramesReady { 0 };
-     Function<void(AudioBus*, size_t framesToProcess)> m_provideInput;
-     RefPtr<AudioBus> m_multiChannelBus;
--    Vector<std::unique_ptr<AudioFloatArray>> m_channelsMemory;
- };
- 
- } // namespace WebCore
--- 
-2.45.2
-

webkit2gtk3-CVE-2024-40779.patch

@@ -1,88 +0,0 @@
-From 2fe5ae29a5f6434ef456afe9673a4f400ec63848 Mon Sep 17 00:00:00 2001
-From: Jean-Yves Avenard <jya@apple.com>
-Date: Fri, 14 Jun 2024 16:08:19 -0700
-Subject: [PATCH] Cherry-pick 272448.1085@safari-7618.3.10-branch
- (ff52ff7cb64e). https://bugs.webkit.org/show_bug.cgi?id=275431
-
-HeapBufferOverflow in computeSampleUsingLinearInterpolation
-https://bugs.webkit.org/show_bug.cgi?id=275431
-rdar://125617812
-
-Reviewed by Youenn Fablet.
-
-Add boundary check.
-This is a copy of blink code for that same function.
-https://source.chromium.org/chromium/chromium/src/+/main:third_party/blink/renderer/modules/webaudio/audio_buffer_source_handler.cc;l=336-341
-
-* LayoutTests/webaudio/crashtest/audiobuffer-sourcenode-resampler-crash-expected.txt: Added.
-* LayoutTests/webaudio/crashtest/audiobuffer-sourcenode-resampler-crash.html: Added.
-* Source/WebCore/Modules/webaudio/AudioBufferSourceNode.cpp:
-(WebCore::AudioBufferSourceNode::renderFromBuffer):
-
-Canonical link: https://commits.webkit.org/274313.347@webkitglib/2.44
----
- ...er-sourcenode-resampler-crash-expected.txt |  1 +
- ...udiobuffer-sourcenode-resampler-crash.html | 25 +++++++++++++++++++
- .../webaudio/AudioBufferSourceNode.cpp        |  6 +++++
- 3 files changed, 32 insertions(+)
- create mode 100644 LayoutTests/webaudio/crashtest/audiobuffer-sourcenode-resampler-crash-expected.txt
- create mode 100644 LayoutTests/webaudio/crashtest/audiobuffer-sourcenode-resampler-crash.html
-
-diff --git a/LayoutTests/webaudio/crashtest/audiobuffer-sourcenode-resampler-crash-expected.txt b/LayoutTests/webaudio/crashtest/audiobuffer-sourcenode-resampler-crash-expected.txt
-new file mode 100644
-index 000000000000..654ddf7f17ef
---- /dev/null
-+++ b/LayoutTests/webaudio/crashtest/audiobuffer-sourcenode-resampler-crash-expected.txt
-@@ -0,0 +1 @@
-+This test passes if it does not crash.
-diff --git a/LayoutTests/webaudio/crashtest/audiobuffer-sourcenode-resampler-crash.html b/LayoutTests/webaudio/crashtest/audiobuffer-sourcenode-resampler-crash.html
-new file mode 100644
-index 000000000000..5fb2dd8c8a5f
---- /dev/null
-+++ b/LayoutTests/webaudio/crashtest/audiobuffer-sourcenode-resampler-crash.html
-@@ -0,0 +1,25 @@
-+<html>
-+<head>
-+    <script>
-+        async function main() {
-+            var ctx = new AudioContext();
-+            var src = new AudioBufferSourceNode(ctx);
-+            src.buffer = ctx.createBuffer(1, 8192, 44100);
-+            src.start(undefined, 0.5);
-+            src.playbackRate.value = -1;
-+            src.connect(ctx.destination, 0, 0);
-+            if (window.testRunner)
-+                testRunner.notifyDone();
-+        }
-+    </script>
-+</head>
-+<body onload="main()">
-+    <p>This test passes if it does not crash.</p>
-+    <script>
-+    if (window.testRunner) {
-+        testRunner.waitUntilDone();
-+        testRunner.dumpAsText();
-+    }
-+    </script>
-+</body>
-+</html>
-diff --git a/Source/WebCore/Modules/webaudio/AudioBufferSourceNode.cpp b/Source/WebCore/Modules/webaudio/AudioBufferSourceNode.cpp
-index 298bd48cdff5..740b793e0ec5 100644
---- a/Source/WebCore/Modules/webaudio/AudioBufferSourceNode.cpp
-+++ b/Source/WebCore/Modules/webaudio/AudioBufferSourceNode.cpp
-@@ -350,6 +350,12 @@ bool AudioBufferSourceNode::renderFromBuffer(AudioBus* bus, unsigned destination
-             if (readIndex2 >= maxFrame)
-                 readIndex2 = m_isLooping ? minFrame : readIndex;
- 
-+            // Final sanity check on buffer access.
-+            // FIXME: as an optimization, try to get rid of this inner-loop check and
-+            // put assertions and guards before the loop.
-+            if (readIndex >= bufferLength || readIndex2 >= bufferLength)
-+                break;
-+
-             // Linear interpolation.
-             for (unsigned i = 0; i < numberOfChannels; ++i) {
-                 float* destination = destinationChannels[i];
--- 
-2.45.2
-

webkit2gtk3-CVE-2024-40780.patch

@@ -1,102 +0,0 @@
-From e83e4c7460972898dc06a5f5ab36eed7c6b101b5 Mon Sep 17 00:00:00 2001
-From: Jer Noble <jer.noble@apple.com>
-Date: Tue, 11 Jun 2024 11:54:06 -0700
-Subject: [PATCH] Cherry-pick 272448.1080@safari-7618.3.10-branch
- (64c9479d6f29). https://bugs.webkit.org/show_bug.cgi?id=275273
-
-Add check in AudioBufferSourceNode::renderFromBuffer() when detune is set to large negative value
-https://bugs.webkit.org/show_bug.cgi?id=275273
-rdar://125617842
-
-Reviewed by Eric Carlson.
-
-* LayoutTests/webaudio/audiobuffersourcenode-detune-crash-expected.txt: Added.
-* LayoutTests/webaudio/audiobuffersourcenode-detune-crash.html: Added.
-* Source/WebCore/Modules/webaudio/AudioBufferSourceNode.cpp:
-(WebCore::AudioBufferSourceNode::renderFromBuffer):
-
-Canonical link: https://commits.webkit.org/274313.345@webkitglib/2.44
----
- ...buffersourcenode-detune-crash-expected.txt | 10 +++++++
- .../audiobuffersourcenode-detune-crash.html   | 30 +++++++++++++++++++
- .../webaudio/AudioBufferSourceNode.cpp        |  7 +++++
- 3 files changed, 47 insertions(+)
- create mode 100644 LayoutTests/webaudio/audiobuffersourcenode-detune-crash-expected.txt
- create mode 100644 LayoutTests/webaudio/audiobuffersourcenode-detune-crash.html
-
-diff --git a/LayoutTests/webaudio/audiobuffersourcenode-detune-crash-expected.txt b/LayoutTests/webaudio/audiobuffersourcenode-detune-crash-expected.txt
-new file mode 100644
-index 000000000000..914ba0b133c4
---- /dev/null
-+++ b/LayoutTests/webaudio/audiobuffersourcenode-detune-crash-expected.txt
-@@ -0,0 +1,10 @@
-+Attempting to create a AudioBufferSourceNode with a large negative detune value should not crash.
-+
-+On success, you will see a series of "PASS" messages, followed by "TEST COMPLETE".
-+
-+
-+PASS Test passed because it did not crash.
-+PASS successfullyParsed is true
-+
-+TEST COMPLETE
-+
-diff --git a/LayoutTests/webaudio/audiobuffersourcenode-detune-crash.html b/LayoutTests/webaudio/audiobuffersourcenode-detune-crash.html
-new file mode 100644
-index 000000000000..e8af579db9d2
---- /dev/null
-+++ b/LayoutTests/webaudio/audiobuffersourcenode-detune-crash.html
-@@ -0,0 +1,30 @@
-+<!DOCTYPE html>
-+<html>
-+    <head>
-+    <script src="../resources/js-test-pre.js"></script>
-+    <script src="resources/audio-testing.js"></script>
-+    </head>
-+    <body>
-+        <script>
-+            description("Attempting to create a AudioBufferSourceNode with a large negative detune value should not crash.");
-+
-+            jsTestIsAsync = true;
-+
-+            var context = new AudioContext();
-+            var src = context.createBufferSource();
-+            var buffer = context.createBuffer(1, 256, 44100);
-+            src.buffer = buffer;
-+            src.start(undefined, 1);
-+            src.connect(context.listener.positionX, 0);
-+            var panner = context.createPanner();
-+            src.detune.value = -0xffffff;
-+            panner.connect(context.destination);
-+            setTimeout(() => {
-+                testPassed("Test passed because it did not crash.");
-+                finishJSTest();
-+            }, 100);
-+        </script>
-+
-+        <script src="../resources/js-test-post.js"></script>
-+    </body>
-+</html>
-diff --git a/Source/WebCore/Modules/webaudio/AudioBufferSourceNode.cpp b/Source/WebCore/Modules/webaudio/AudioBufferSourceNode.cpp
-index f86bffb9b507..298bd48cdff5 100644
---- a/Source/WebCore/Modules/webaudio/AudioBufferSourceNode.cpp
-+++ b/Source/WebCore/Modules/webaudio/AudioBufferSourceNode.cpp
-@@ -328,9 +328,16 @@ bool AudioBufferSourceNode::renderFromBuffer(AudioBus* bus, unsigned destination
-         virtualReadIndex = readIndex;
-     } else if (!pitchRate) {
-         unsigned readIndex = static_cast<unsigned>(virtualReadIndex);
-+        int deltaFrames = static_cast<int>(virtualDeltaFrames);
-+        maxFrame = static_cast<unsigned>(virtualMaxFrame);
-+
-+        if (readIndex >= maxFrame)
-+            readIndex -= deltaFrames;
- 
-         for (unsigned i = 0; i < numberOfChannels; ++i)
-             std::fill_n(destinationChannels[i] + writeIndex, framesToProcess, sourceChannels[i][readIndex]);
-+
-+        virtualReadIndex = readIndex;
-     } else if (reverse) {
-         unsigned maxFrame = static_cast<unsigned>(virtualMaxFrame);
-         unsigned minFrame = static_cast<unsigned>(floorf(virtualMinFrame));
--- 
-2.45.2
-

webkit2gtk3-CVE-2024-40782.patch

@@ -1,84 +0,0 @@
-From 617f1c4c9c7f1525abc47967d4c7734fed3ff525 Mon Sep 17 00:00:00 2001
-From: Antti Koivisto <antti@apple.com>
-Date: Mon, 20 May 2024 11:36:34 -0700
-Subject: [PATCH] Cherry-pick 279005@main (c2f9092d3a8e).
- https://bugs.webkit.org/show_bug.cgi?id=268770
-
-    Nullptr crash due to `display:block ruby` and continuations
-    https://bugs.webkit.org/show_bug.cgi?id=268770
-    rdar://121960530
-
-    Reviewed by Alan Baradlay.
-
-    Continuations may end up splitting anonymous 'display:ruby' box inside block ruby.
-
-    * LayoutTests/fast/ruby/ruby-block-continuation-crash-expected.txt: Added.
-    * LayoutTests/fast/ruby/ruby-block-continuation-crash.html: Added.
-    * Source/WebCore/rendering/updating/RenderTreeBuilderRuby.cpp:
-    (WebCore::RenderTreeBuilder::Ruby::findOrCreateParentForStyleBasedRubyChild):
-
-    Find the correct anonymous box from nested continuation structure.
-
-    Canonical link: https://commits.webkit.org/279005@main
-
-Canonical link: https://commits.webkit.org/274313.286@webkitglib/2.44
----
- .../ruby/ruby-block-continuation-crash-expected.txt |  3 +++
- .../fast/ruby/ruby-block-continuation-crash.html    |  9 +++++++++
- .../rendering/updating/RenderTreeBuilderRuby.cpp    | 13 ++++++++++---
- 3 files changed, 22 insertions(+), 3 deletions(-)
- create mode 100644 LayoutTests/fast/ruby/ruby-block-continuation-crash-expected.txt
- create mode 100644 LayoutTests/fast/ruby/ruby-block-continuation-crash.html
-
-diff --git a/LayoutTests/fast/ruby/ruby-block-continuation-crash-expected.txt b/LayoutTests/fast/ruby/ruby-block-continuation-crash-expected.txt
-new file mode 100644
-index 000000000000..f85a15505104
---- /dev/null
-+++ b/LayoutTests/fast/ruby/ruby-block-continuation-crash-expected.txt
-@@ -0,0 +1,3 @@
-+base with
-+forced
-+line break annotation This test passes if it doesn't crash.
-diff --git a/LayoutTests/fast/ruby/ruby-block-continuation-crash.html b/LayoutTests/fast/ruby/ruby-block-continuation-crash.html
-new file mode 100644
-index 000000000000..3f762d4236ea
---- /dev/null
-+++ b/LayoutTests/fast/ruby/ruby-block-continuation-crash.html
-@@ -0,0 +1,9 @@
-+<script>
-+if (window.testRunner)
-+    testRunner.dumpAsText();
-+</script>
-+<ruby style="position: absolute">
-+  <rb><span>base with <div>forced</div> line break</span></rb>
-+  <rt>annotation</rt>
-+</ruby>
-+This test passes if it doesn't crash.
-diff --git a/Source/WebCore/rendering/updating/RenderTreeBuilderRuby.cpp b/Source/WebCore/rendering/updating/RenderTreeBuilderRuby.cpp
-index 62d8b6803323..9f7634612822 100644
---- a/Source/WebCore/rendering/updating/RenderTreeBuilderRuby.cpp
-+++ b/Source/WebCore/rendering/updating/RenderTreeBuilderRuby.cpp
-@@ -271,10 +271,17 @@ RenderElement& RenderTreeBuilder::Ruby::findOrCreateParentForStyleBasedRubyChild
-     if (!child.isRenderText() && child.style().display() == DisplayType::Ruby && parent.style().display() == DisplayType::RubyBlock)
-         return parent;
- 
--    if (parent.style().display() == DisplayType::RubyBlock && parent.firstChild()) {
-+    if (parent.style().display() == DisplayType::RubyBlock) {
-         // See if we have an anonymous ruby box already.
--        ASSERT(parent.firstChild()->style().display() == DisplayType::Ruby);
--        return downcast<RenderElement>(*parent.firstChild());
-+        // FIXME: It should be the immediate child but continuations can break this assumption.
-+        for (CheckedPtr first = parent.firstChild(); first; first = first->firstChildSlow()) {
-+            if (!first->isAnonymous()) {
-+                ASSERT_NOT_REACHED();
-+                break;
-+            }
-+            if (first->style().display() == DisplayType::Ruby)
-+                return downcast<RenderElement>(*first);
-+        }
-     }
- 
-     if (parent.style().display() != DisplayType::Ruby) {
--- 
-2.45.2
-

webkit2gtk3-CVE-2024-44308.patch

@@ -1,60 +0,0 @@
-From 53e7f27d262249310bd6b7ad452e7df334c92b7d Mon Sep 17 00:00:00 2001
-From: Daniel Liu <danlliu@umich.edu>
-Date: Wed, 13 Nov 2024 12:27:15 -0800
-Subject: [PATCH] Cherry-pick ded4d02c0a93.
- https://bugs.webkit.org/show_bug.cgi?id=283063
-
-Don't allocate DFG register after a slow path
-https://bugs.webkit.org/show_bug.cgi?id=283063
-rdar://139747120
-
-Reviewed by Yusuke Suzuki.
-
-Allocating a DFG register after a slow path means that if the slow path
-is taken, we end up with an incorrect global state.
-
-* Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp:
-(JSC::DFG::SpeculativeJIT::compilePutByValForIntTypedArray):
-
-Canonical link: https://commits.webkit.org/282416.295@webkitglib/2.46
----
- Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp | 16 ++++++++--------
- 1 file changed, 8 insertions(+), 8 deletions(-)
-
-diff --git a/Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp b/Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp
-index 356d52b21a12..d041b63e8ba9 100644
---- a/Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp
-+++ b/Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp
-@@ -3528,6 +3528,14 @@ void SpeculativeJIT::compilePutByValForIntTypedArray(Node* node, TypedArrayType
-         }
-     }
- 
-+    GPRReg scratch2GPR = InvalidGPRReg;
-+#if USE(JSVALUE64)
-+    if (node->arrayMode().mayBeResizableOrGrowableSharedTypedArray()) {
-+        scratch2.emplace(this);
-+        scratch2GPR = scratch2->gpr();
-+    }
-+#endif
-+
-     bool result = getIntTypedArrayStoreOperand(
-         value, propertyReg,
- #if USE(JSVALUE32_64)
-@@ -3539,14 +3547,6 @@ void SpeculativeJIT::compilePutByValForIntTypedArray(Node* node, TypedArrayType
-         return;
-     }
- 
--    GPRReg scratch2GPR = InvalidGPRReg;
--#if USE(JSVALUE64)
--    if (node->arrayMode().mayBeResizableOrGrowableSharedTypedArray()) {
--        scratch2.emplace(this);
--        scratch2GPR = scratch2->gpr();
--    }
--#endif
--
-     GPRReg valueGPR = value.gpr();
-     GPRReg scratchGPR = scratch.gpr();
- #if USE(JSVALUE32_64)
--- 
-2.47.0
-

webkit2gtk3-CVE-2024-44309.patch

@@ -1,321 +0,0 @@
-From c52da7c313795d61665253f23c9f298005549c73 Mon Sep 17 00:00:00 2001
-From: Charlie Wolfe <charliew@apple.com>
-Date: Thu, 14 Nov 2024 13:56:35 -0800
-Subject: [PATCH] Cherry-pick 60c387845715.
- https://bugs.webkit.org/show_bug.cgi?id=282197
-
-Cherry-pick 2815b4e29829. rdar://139893250
-
-    Data Isolation bypass via attacker controlled firstPartyForCookies
-    https://bugs.webkit.org/show_bug.cgi?id=283095
-    rdar://139818629
-
-    Reviewed by Matthew Finkel and Alex Christensen.
-
-    `NetworkProcess::allowsFirstPartyForCookies` unconditionally allows cookie access for about:blank or
-    empty firstPartyForCookies URLs. We tried to remove this in rdar://105733798 and rdar://107270673, but
-    we needed to revert both because there were rare and subtle bugs where certain requests would incorrectly
-    have about:blank set as their firstPartyForCookies, causing us to kill the WCP.
-
-    This patch is a lower risk change that removes the unconditional cookie access for requests that have an
-    empty firstPartyForCookies, but will not kill the WCP that is incorrectly sending an empty
-    firstPartyForCookies.
-
-    * Source/WebKit/NetworkProcess/NetworkConnectionToWebProcess.cpp:
-    (WebKit::NetworkConnectionToWebProcess::createSocketChannel):
-    (WebKit::NetworkConnectionToWebProcess::scheduleResourceLoad):
-    (WebKit::NetworkConnectionToWebProcess::cookiesForDOM):
-    (WebKit::NetworkConnectionToWebProcess::setCookiesFromDOM):
-    (WebKit::NetworkConnectionToWebProcess::cookiesEnabled):
-    (WebKit::NetworkConnectionToWebProcess::cookieRequestHeaderFieldValue):
-    (WebKit::NetworkConnectionToWebProcess::getRawCookies):
-    (WebKit::NetworkConnectionToWebProcess::cookiesForDOMAsync):
-    (WebKit::NetworkConnectionToWebProcess::setCookieFromDOMAsync):
-    (WebKit::NetworkConnectionToWebProcess::domCookiesForHost):
-    (WebKit::NetworkConnectionToWebProcess::establishSWContextConnection):
-    * Source/WebKit/NetworkProcess/NetworkProcess.cpp:
-    (WebKit::NetworkProcess::allowsFirstPartyForCookies):
-    * Source/WebKit/NetworkProcess/NetworkProcess.h:
-    * Source/WebKit/NetworkProcess/NetworkSession.cpp:
-    (WebKit::NetworkSession::addAllowedFirstPartyForCookies):
-    * Source/WebKit/NetworkProcess/ServiceWorker/WebSWServerConnection.cpp:
-    (WebKit::WebSWServerConnection::scheduleJobInServer):
-    * Source/WebKit/NetworkProcess/SharedWorker/WebSharedWorkerServerConnection.cpp:
-    (WebKit::WebSharedWorkerServerConnection::requestSharedWorker):
-    * Tools/TestWebKitAPI/Tests/WebKitCocoa/IPCTestingAPI.mm:
-    (EmptyFirstPartyForCookiesCookieRequestHeaderFieldValue)):
-
-    Canonical link: https://commits.webkit.org/283286.477@safari-7620-branch
-
-Canonical link: https://commits.webkit.org/282416.294@webkitglib/2.46
----
- .../NetworkConnectionToWebProcess.cpp         | 51 ++++++++++++++-----
- .../WebKit/NetworkProcess/NetworkProcess.cpp  | 37 +++++++-------
- Source/WebKit/NetworkProcess/NetworkProcess.h |  5 +-
- .../WebKit/NetworkProcess/NetworkSession.cpp  |  2 +-
- .../ServiceWorker/WebSWServerConnection.cpp   |  2 +-
- .../WebSharedWorkerServerConnection.cpp       |  2 +-
- .../Tests/WebKitCocoa/IPCTestingAPI.mm        | 33 ++++++++++++
- 7 files changed, 96 insertions(+), 36 deletions(-)
-
-diff --git a/Source/WebKit/NetworkProcess/NetworkConnectionToWebProcess.cpp b/Source/WebKit/NetworkProcess/NetworkConnectionToWebProcess.cpp
-index a0ad3c628ec3..c13a96f0e796 100644
---- a/Source/WebKit/NetworkProcess/NetworkConnectionToWebProcess.cpp
-+++ b/Source/WebKit/NetworkProcess/NetworkConnectionToWebProcess.cpp
-@@ -502,7 +502,7 @@ void NetworkConnectionToWebProcess::didReceiveInvalidMessage(IPC::Connection&, I
- 
- void NetworkConnectionToWebProcess::createSocketChannel(const ResourceRequest& request, const String& protocol, WebSocketIdentifier identifier, WebPageProxyIdentifier webPageProxyID, std::optional<FrameIdentifier> frameID, std::optional<PageIdentifier> pageID, const ClientOrigin& clientOrigin, bool hadMainFrameMainResourcePrivateRelayed, bool allowPrivacyProxy, OptionSet<AdvancedPrivacyProtections> advancedPrivacyProtections, ShouldRelaxThirdPartyCookieBlocking shouldRelaxThirdPartyCookieBlocking, WebCore::StoredCredentialsPolicy storedCredentialsPolicy)
- {
--    MESSAGE_CHECK(m_networkProcess->allowsFirstPartyForCookies(m_webProcessIdentifier, request.firstPartyForCookies()));
-+    MESSAGE_CHECK(m_networkProcess->allowsFirstPartyForCookies(m_webProcessIdentifier, request.firstPartyForCookies()) != NetworkProcess::AllowCookieAccess::Terminate);
- 
-     ASSERT(!m_networkSocketChannels.contains(identifier));
-     if (auto channel = NetworkSocketChannel::create(*this, m_sessionID, request, protocol, identifier, webPageProxyID, frameID, pageID, clientOrigin, hadMainFrameMainResourcePrivateRelayed, allowPrivacyProxy, advancedPrivacyProtections, shouldRelaxThirdPartyCookieBlocking, storedCredentialsPolicy))
-@@ -552,11 +552,11 @@ RefPtr<ServiceWorkerFetchTask> NetworkConnectionToWebProcess::createFetchTask(Ne
- 
- void NetworkConnectionToWebProcess::scheduleResourceLoad(NetworkResourceLoadParameters&& loadParameters, std::optional<NetworkResourceLoadIdentifier> existingLoaderToResume)
- {
--    bool hasCookieAccess = m_networkProcess->allowsFirstPartyForCookies(m_webProcessIdentifier, loadParameters.request.firstPartyForCookies());
--    if (UNLIKELY(!hasCookieAccess))
-+    auto allowCookieAccess = m_networkProcess->allowsFirstPartyForCookies(m_webProcessIdentifier, loadParameters.request.firstPartyForCookies());
-+    if (UNLIKELY(allowCookieAccess != NetworkProcess::AllowCookieAccess::Allow))
-         RELEASE_LOG_ERROR(Loading, "scheduleResourceLoad: Web process does not have cookie access to url %" SENSITIVE_LOG_STRING " for request %" SENSITIVE_LOG_STRING, loadParameters.request.firstPartyForCookies().string().utf8().data(), loadParameters.request.url().string().utf8().data());
- 
--    MESSAGE_CHECK(hasCookieAccess);
-+    MESSAGE_CHECK(allowCookieAccess != NetworkProcess::AllowCookieAccess::Terminate);
- 
-     CONNECTION_RELEASE_LOG(Loading, "scheduleResourceLoad: (parentPID=%d, pageProxyID=%" PRIu64 ", webPageID=%" PRIu64 ", frameID=%" PRIu64 ", resourceID=%" PRIu64 ", existingLoaderToResume=%" PRIu64 ")", loadParameters.parentPID, loadParameters.webPageProxyID.toUInt64(), loadParameters.webPageID.toUInt64(), loadParameters.webFrameID.object().toUInt64(), loadParameters.identifier.toUInt64(), valueOrDefault(existingLoaderToResume).toUInt64());
- 
-@@ -785,7 +785,10 @@ void NetworkConnectionToWebProcess::registerURLSchemesAsCORSEnabled(Vector<Strin
- 
- void NetworkConnectionToWebProcess::cookiesForDOM(const URL& firstParty, const SameSiteInfo& sameSiteInfo, const URL& url, FrameIdentifier frameID, PageIdentifier pageID, IncludeSecureCookies includeSecureCookies, ApplyTrackingPrevention applyTrackingPrevention, ShouldRelaxThirdPartyCookieBlocking shouldRelaxThirdPartyCookieBlocking, CompletionHandler<void(String cookieString, bool secureCookiesAccessed)>&& completionHandler)
- {
--    MESSAGE_CHECK_COMPLETION(m_networkProcess->allowsFirstPartyForCookies(m_webProcessIdentifier, firstParty), completionHandler({ }, false));
-+    auto allowCookieAccess = m_networkProcess->allowsFirstPartyForCookies(m_webProcessIdentifier, firstParty);
-+    MESSAGE_CHECK_COMPLETION(allowCookieAccess != NetworkProcess::AllowCookieAccess::Terminate, completionHandler({ }, false));
-+    if (allowCookieAccess != NetworkProcess::AllowCookieAccess::Allow)
-+        return completionHandler({ }, false);
- 
-     auto* networkStorageSession = storageSession();
-     if (!networkStorageSession)
-@@ -802,7 +805,10 @@ void NetworkConnectionToWebProcess::cookiesForDOM(const URL& firstParty, const S
- 
- void NetworkConnectionToWebProcess::setCookiesFromDOM(const URL& firstParty, const SameSiteInfo& sameSiteInfo, const URL& url, WebCore::FrameIdentifier frameID, PageIdentifier pageID, ApplyTrackingPrevention applyTrackingPrevention, const String& cookieString, ShouldRelaxThirdPartyCookieBlocking shouldRelaxThirdPartyCookieBlocking)
- {
--    MESSAGE_CHECK(m_networkProcess->allowsFirstPartyForCookies(m_webProcessIdentifier, firstParty));
-+    auto allowCookieAccess = m_networkProcess->allowsFirstPartyForCookies(m_webProcessIdentifier, firstParty);
-+    MESSAGE_CHECK(allowCookieAccess != NetworkProcess::AllowCookieAccess::Terminate);
-+    if (allowCookieAccess != NetworkProcess::AllowCookieAccess::Allow)
-+        return;
- 
-     auto* networkStorageSession = storageSession();
-     if (!networkStorageSession)
-@@ -823,7 +829,10 @@ void NetworkConnectionToWebProcess::cookiesEnabledSync(const URL& firstParty, co
- 
- void NetworkConnectionToWebProcess::cookiesEnabled(const URL& firstParty, const URL& url, std::optional<FrameIdentifier> frameID, std::optional<PageIdentifier> pageID, ShouldRelaxThirdPartyCookieBlocking shouldRelaxThirdPartyCookieBlocking, CompletionHandler<void(bool)>&& completionHandler)
- {
--    MESSAGE_CHECK_COMPLETION(m_networkProcess->allowsFirstPartyForCookies(m_webProcessIdentifier, firstParty), completionHandler(false));
-+    auto allowCookieAccess = m_networkProcess->allowsFirstPartyForCookies(m_webProcessIdentifier, firstParty);
-+    MESSAGE_CHECK_COMPLETION(allowCookieAccess != NetworkProcess::AllowCookieAccess::Terminate, completionHandler(false));
-+    if (allowCookieAccess != NetworkProcess::AllowCookieAccess::Allow)
-+        return completionHandler(false);
- 
-     auto* networkStorageSession = storageSession();
-     if (!networkStorageSession) {
-@@ -837,7 +846,10 @@ void NetworkConnectionToWebProcess::cookiesEnabled(const URL& firstParty, const
- 
- void NetworkConnectionToWebProcess::cookieRequestHeaderFieldValue(const URL& firstParty, const SameSiteInfo& sameSiteInfo, const URL& url, std::optional<FrameIdentifier> frameID, std::optional<PageIdentifier> pageID, IncludeSecureCookies includeSecureCookies, ApplyTrackingPrevention applyTrackingPrevention, ShouldRelaxThirdPartyCookieBlocking shouldRelaxThirdPartyCookieBlocking, CompletionHandler<void(String, bool)>&& completionHandler)
- {
--    MESSAGE_CHECK_COMPLETION(m_networkProcess->allowsFirstPartyForCookies(m_webProcessIdentifier, firstParty), completionHandler({ }, false));
-+    auto allowCookieAccess = m_networkProcess->allowsFirstPartyForCookies(m_webProcessIdentifier, firstParty);
-+    MESSAGE_CHECK_COMPLETION(allowCookieAccess != NetworkProcess::AllowCookieAccess::Terminate, completionHandler({ }, false));
-+    if (allowCookieAccess != NetworkProcess::AllowCookieAccess::Allow)
-+        return completionHandler({ }, false);
- 
-     auto* networkStorageSession = storageSession();
-     if (!networkStorageSession)
-@@ -848,7 +860,10 @@ void NetworkConnectionToWebProcess::cookieRequestHeaderFieldValue(const URL& fir
- 
- void NetworkConnectionToWebProcess::getRawCookies(const URL& firstParty, const SameSiteInfo& sameSiteInfo, const URL& url, std::optional<FrameIdentifier> frameID, std::optional<PageIdentifier> pageID, ApplyTrackingPrevention applyTrackingPrevention, ShouldRelaxThirdPartyCookieBlocking shouldRelaxThirdPartyCookieBlocking, CompletionHandler<void(Vector<WebCore::Cookie>&&)>&& completionHandler)
- {
--    MESSAGE_CHECK_COMPLETION(m_networkProcess->allowsFirstPartyForCookies(m_webProcessIdentifier, firstParty), completionHandler({ }));
-+    auto allowCookieAccess = m_networkProcess->allowsFirstPartyForCookies(m_webProcessIdentifier, firstParty);
-+    MESSAGE_CHECK_COMPLETION(allowCookieAccess != NetworkProcess::AllowCookieAccess::Terminate, completionHandler({ }));
-+    if (allowCookieAccess != NetworkProcess::AllowCookieAccess::Allow)
-+        return completionHandler({ });
- 
-     auto* networkStorageSession = storageSession();
-     if (!networkStorageSession)
-@@ -877,7 +892,10 @@ void NetworkConnectionToWebProcess::deleteCookie(const URL& url, const String& c
- 
- void NetworkConnectionToWebProcess::cookiesForDOMAsync(const URL& firstParty, const SameSiteInfo& sameSiteInfo, const URL& url, std::optional<WebCore::FrameIdentifier> frameID, std::optional<WebCore::PageIdentifier> pageID, IncludeSecureCookies includeSecureCookies, ApplyTrackingPrevention applyTrackingPrevention, ShouldRelaxThirdPartyCookieBlocking shouldRelaxThirdPartyCookieBlocking, WebCore::CookieStoreGetOptions&& options, CompletionHandler<void(std::optional<Vector<WebCore::Cookie>>&&)>&& completionHandler)
- {
--    MESSAGE_CHECK_COMPLETION(m_networkProcess->allowsFirstPartyForCookies(m_webProcessIdentifier, firstParty), completionHandler(std::nullopt));
-+    auto allowCookieAccess = m_networkProcess->allowsFirstPartyForCookies(m_webProcessIdentifier, firstParty);
-+    MESSAGE_CHECK_COMPLETION(allowCookieAccess != NetworkProcess::AllowCookieAccess::Terminate, completionHandler(std::nullopt));
-+    if (allowCookieAccess != NetworkProcess::AllowCookieAccess::Allow)
-+        return completionHandler(std::nullopt);
- 
-     auto* networkStorageSession = storageSession();
-     if (!networkStorageSession)
-@@ -894,7 +912,10 @@ void NetworkConnectionToWebProcess::cookiesForDOMAsync(const URL& firstParty, co
- 
- void NetworkConnectionToWebProcess::setCookieFromDOMAsync(const URL& firstParty, const SameSiteInfo& sameSiteInfo, const URL& url, std::optional<WebCore::FrameIdentifier> frameID, std::optional<WebCore::PageIdentifier> pageID, ApplyTrackingPrevention applyTrackingPrevention, WebCore::Cookie&& cookie, ShouldRelaxThirdPartyCookieBlocking shouldRelaxThirdPartyCookieBlocking, CompletionHandler<void(bool)>&& completionHandler)
- {
--    MESSAGE_CHECK(m_networkProcess->allowsFirstPartyForCookies(m_webProcessIdentifier, firstParty));
-+    auto allowCookieAccess = m_networkProcess->allowsFirstPartyForCookies(m_webProcessIdentifier, firstParty);
-+    MESSAGE_CHECK_COMPLETION(allowCookieAccess != NetworkProcess::AllowCookieAccess::Terminate, completionHandler(false));
-+    if (allowCookieAccess != NetworkProcess::AllowCookieAccess::Allow)
-+        return completionHandler(false);
- 
-     auto* networkStorageSession = storageSession();
-     if (!networkStorageSession)
-@@ -914,7 +935,10 @@ void NetworkConnectionToWebProcess::domCookiesForHost(const URL& url, Completion
- {
-     auto host = url.host().toString();
-     MESSAGE_CHECK_COMPLETION(HashSet<String>::isValidValue(host), completionHandler({ }));
--    MESSAGE_CHECK_COMPLETION(m_networkProcess->allowsFirstPartyForCookies(m_webProcessIdentifier, url), completionHandler({ }));
-+    auto allowCookieAccess = m_networkProcess->allowsFirstPartyForCookies(m_webProcessIdentifier, url);
-+    MESSAGE_CHECK_COMPLETION(allowCookieAccess != NetworkProcess::AllowCookieAccess::Terminate, completionHandler({ }));
-+    if (allowCookieAccess != NetworkProcess::AllowCookieAccess::Allow)
-+        return completionHandler({ });
- 
-     auto* networkStorageSession = storageSession();
-     if (!networkStorageSession)
-@@ -1423,7 +1447,8 @@ void NetworkConnectionToWebProcess::establishSWContextConnection(WebPageProxyIde
- {
-     auto* session = networkSession();
-     if (auto* swServer = session ? session->swServer() : nullptr) {
--        MESSAGE_CHECK(session->networkProcess().allowsFirstPartyForCookies(webProcessIdentifier(), registrableDomain));
-+        auto allowCookieAccess = session->networkProcess().allowsFirstPartyForCookies(webProcessIdentifier(), registrableDomain);
-+        MESSAGE_CHECK(allowCookieAccess != NetworkProcess::AllowCookieAccess::Terminate);
-         m_swContextConnection = makeUnique<WebSWServerToContextConnection>(*this, webPageProxyID, WTFMove(registrableDomain), serviceWorkerPageIdentifier, *swServer);
-     }
-     completionHandler();
-diff --git a/Source/WebKit/NetworkProcess/NetworkProcess.cpp b/Source/WebKit/NetworkProcess/NetworkProcess.cpp
-index db0437d3b70a..8f637e6c85fd 100644
---- a/Source/WebKit/NetworkProcess/NetworkProcess.cpp
-+++ b/Source/WebKit/NetworkProcess/NetworkProcess.cpp
-@@ -458,48 +458,49 @@ void NetworkProcess::webProcessWillLoadWebArchive(WebCore::ProcessIdentifier pro
-     }).iterator->value.first = LoadedWebArchive::Yes;
- }
- 
--bool NetworkProcess::allowsFirstPartyForCookies(WebCore::ProcessIdentifier processIdentifier, const URL& firstParty)
-+auto NetworkProcess::allowsFirstPartyForCookies(WebCore::ProcessIdentifier processIdentifier, const URL& firstParty) -> AllowCookieAccess
- {
--    // FIXME: This should probably not be necessary. If about:blank is the first party for cookies,
--    // we should set it to be the inherited origin then remove this exception.
--    if (firstParty.isAboutBlank())
--        return true;
-+    auto allowCookieAccess = allowsFirstPartyForCookies(processIdentifier, RegistrableDomain { firstParty });
-+    if (allowCookieAccess == NetworkProcess::AllowCookieAccess::Terminate) {
-+        // FIXME: This should probably not be necessary. If about:blank is the first party for cookies,
-+        // we should set it to be the inherited origin then remove this exception.
-+        if (firstParty.isAboutBlank())
-+            return AllowCookieAccess::Disallow;
- 
--    if (firstParty.isNull())
--        return true; // FIXME: This shouldn't be allowed.
-+        if (firstParty.isNull())
-+            return AllowCookieAccess::Disallow; // FIXME: This shouldn't be allowed.
-+    }
- 
--    return allowsFirstPartyForCookies(processIdentifier, RegistrableDomain { firstParty });
-+    return allowCookieAccess;
- }
- 
--bool NetworkProcess::allowsFirstPartyForCookies(WebCore::ProcessIdentifier processIdentifier, const RegistrableDomain& firstPartyDomain)
-+auto NetworkProcess::allowsFirstPartyForCookies(WebCore::ProcessIdentifier processIdentifier, const RegistrableDomain& firstPartyDomain) -> AllowCookieAccess
- {
-     // FIXME: This shouldn't be needed but it is hit sometimes at least with PDFs.
--    if (firstPartyDomain.isEmpty())
--        return true;
--
-+    auto terminateOrDisallow = firstPartyDomain.isEmpty() ? AllowCookieAccess::Disallow : AllowCookieAccess::Terminate;
-     if (!decltype(m_allowedFirstPartiesForCookies)::isValidKey(processIdentifier)) {
-         ASSERT_NOT_REACHED();
--        return false;
-+        return terminateOrDisallow;
-     }
- 
-     auto iterator = m_allowedFirstPartiesForCookies.find(processIdentifier);
-     if (iterator == m_allowedFirstPartiesForCookies.end()) {
-         ASSERT_NOT_REACHED();
--        return false;
-+        return terminateOrDisallow;
-     }
- 
-     if (iterator->value.first == LoadedWebArchive::Yes)
--        return true;
-+        return AllowCookieAccess::Allow;
- 
-     auto& set = iterator->value.second;
-     if (!std::remove_reference_t<decltype(set)>::isValidValue(firstPartyDomain)) {
-         ASSERT_NOT_REACHED();
--        return false;
-+        return terminateOrDisallow;
-     }
- 
-     auto result = set.contains(firstPartyDomain);
--    ASSERT(result);
--    return result;
-+    ASSERT(result || terminateOrDisallow == AllowCookieAccess::Disallow);
-+    return result ? AllowCookieAccess::Allow : terminateOrDisallow;
- }
- 
- void NetworkProcess::addStorageSession(PAL::SessionID sessionID, const WebsiteDataStoreParameters& parameters)
-diff --git a/Source/WebKit/NetworkProcess/NetworkProcess.h b/Source/WebKit/NetworkProcess/NetworkProcess.h
-index 0897537e5847..54f19ab96ce4 100644
---- a/Source/WebKit/NetworkProcess/NetworkProcess.h
-+++ b/Source/WebKit/NetworkProcess/NetworkProcess.h
-@@ -417,8 +417,9 @@ public:
-     void deleteWebsiteDataForOrigin(PAL::SessionID, OptionSet<WebsiteDataType>, const WebCore::ClientOrigin&, CompletionHandler<void()>&&);
-     void deleteWebsiteDataForOrigins(PAL::SessionID, OptionSet<WebsiteDataType>, const Vector<WebCore::SecurityOriginData>& origins, const Vector<String>& cookieHostNames, const Vector<String>& HSTSCacheHostnames, const Vector<RegistrableDomain>&, CompletionHandler<void()>&&);
- 
--    bool allowsFirstPartyForCookies(WebCore::ProcessIdentifier, const URL&);
--    bool allowsFirstPartyForCookies(WebCore::ProcessIdentifier, const RegistrableDomain&);
-+    enum class AllowCookieAccess : uint8_t { Disallow, Allow, Terminate };
-+    AllowCookieAccess allowsFirstPartyForCookies(WebCore::ProcessIdentifier, const URL&);
-+    AllowCookieAccess allowsFirstPartyForCookies(WebCore::ProcessIdentifier, const RegistrableDomain&);
-     void addAllowedFirstPartyForCookies(WebCore::ProcessIdentifier, WebCore::RegistrableDomain&&, LoadedWebArchive, CompletionHandler<void()>&&);
-     void webProcessWillLoadWebArchive(WebCore::ProcessIdentifier);
- 
-diff --git a/Source/WebKit/NetworkProcess/NetworkSession.cpp b/Source/WebKit/NetworkProcess/NetworkSession.cpp
-index d3e9e8b4b64b..2c5fb9ad6765 100644
---- a/Source/WebKit/NetworkProcess/NetworkSession.cpp
-+++ b/Source/WebKit/NetworkProcess/NetworkSession.cpp
-@@ -728,7 +728,7 @@ void NetworkSession::appBoundDomains(CompletionHandler<void(HashSet<WebCore::Reg
- 
- void NetworkSession::addAllowedFirstPartyForCookies(WebCore::ProcessIdentifier webProcessIdentifier, std::optional<WebCore::ProcessIdentifier> requestingProcessIdentifier, WebCore::RegistrableDomain&& firstPartyForCookies)
- {
--    if (requestingProcessIdentifier && (requestingProcessIdentifier != webProcessIdentifier) && !m_networkProcess->allowsFirstPartyForCookies(requestingProcessIdentifier.value(), firstPartyForCookies)) {
-+    if (requestingProcessIdentifier && (requestingProcessIdentifier != webProcessIdentifier) && m_networkProcess->allowsFirstPartyForCookies(requestingProcessIdentifier.value(), firstPartyForCookies) != NetworkProcess::AllowCookieAccess::Allow) {
-         ASSERT_NOT_REACHED();
-         return;
-     }
-diff --git a/Source/WebKit/NetworkProcess/ServiceWorker/WebSWServerConnection.cpp b/Source/WebKit/NetworkProcess/ServiceWorker/WebSWServerConnection.cpp
-index 72d67d9f98a2..515f4597cf33 100644
---- a/Source/WebKit/NetworkProcess/ServiceWorker/WebSWServerConnection.cpp
-+++ b/Source/WebKit/NetworkProcess/ServiceWorker/WebSWServerConnection.cpp
-@@ -344,7 +344,7 @@ void WebSWServerConnection::postMessageToServiceWorker(ServiceWorkerIdentifier d
- 
- void WebSWServerConnection::scheduleJobInServer(ServiceWorkerJobData&& jobData)
- {
--    MESSAGE_CHECK(networkProcess().allowsFirstPartyForCookies(identifier(), WebCore::RegistrableDomain::uncheckedCreateFromHost(jobData.topOrigin.host())));
-+    MESSAGE_CHECK(networkProcess().allowsFirstPartyForCookies(identifier(), WebCore::RegistrableDomain::uncheckedCreateFromHost(jobData.topOrigin.host())) != NetworkProcess::AllowCookieAccess::Terminate);
- 
-     ASSERT(!jobData.scopeURL.isNull());
-     if (jobData.scopeURL.isNull()) {
-diff --git a/Source/WebKit/NetworkProcess/SharedWorker/WebSharedWorkerServerConnection.cpp b/Source/WebKit/NetworkProcess/SharedWorker/WebSharedWorkerServerConnection.cpp
-index 83affaaded38..084bbdf8f8c5 100644
---- a/Source/WebKit/NetworkProcess/SharedWorker/WebSharedWorkerServerConnection.cpp
-+++ b/Source/WebKit/NetworkProcess/SharedWorker/WebSharedWorkerServerConnection.cpp
-@@ -79,7 +79,7 @@ NetworkSession* WebSharedWorkerServerConnection::session()
- 
- void WebSharedWorkerServerConnection::requestSharedWorker(WebCore::SharedWorkerKey&& sharedWorkerKey, WebCore::SharedWorkerObjectIdentifier sharedWorkerObjectIdentifier, WebCore::TransferredMessagePort&& port, WebCore::WorkerOptions&& workerOptions)
- {
--    MESSAGE_CHECK(m_networkProcess->allowsFirstPartyForCookies(m_webProcessIdentifier, WebCore::RegistrableDomain::uncheckedCreateFromHost(sharedWorkerKey.origin.topOrigin.host())));
-+    MESSAGE_CHECK(m_networkProcess->allowsFirstPartyForCookies(m_webProcessIdentifier, WebCore::RegistrableDomain::uncheckedCreateFromHost(sharedWorkerKey.origin.topOrigin.host())) != NetworkProcess::AllowCookieAccess::Terminate);
-     MESSAGE_CHECK(sharedWorkerObjectIdentifier.processIdentifier() == m_webProcessIdentifier);
-     MESSAGE_CHECK(sharedWorkerKey.name == workerOptions.name);
-     CONNECTION_RELEASE_LOG("requestSharedWorker: sharedWorkerObjectIdentifier=%" PUBLIC_LOG_STRING, sharedWorkerObjectIdentifier.toString().utf8().data());

webkit2gtk3-disable-dmabuf-nvidia.patch

@@ -1,65 +0,0 @@
-From: Carlos Garcia Campos <cgarcia@igalia.com>
-Subject: Disable DMABuf renderer for NVIDIA proprietary drivers
-Bug: https://bugs.webkit.org/show_bug.cgi?id=262607
-Bug-Debian: https://bugs.debian.org/1039720
-Origin: https://github.com/WebKit/WebKit/pull/18614
-Index: webkitgtk-2.44.0/Source/WebKit/UIProcess/gtk/AcceleratedBackingStoreDMABuf.cpp
-===================================================================
---- webkitgtk-2.44.0.orig/Source/WebKit/UIProcess/gtk/AcceleratedBackingStoreDMABuf.cpp
-+++ webkitgtk-2.44.0/Source/WebKit/UIProcess/gtk/AcceleratedBackingStoreDMABuf.cpp
-@@ -37,6 +37,7 @@
- #include <WebCore/GLContext.h>
- #include <WebCore/IntRect.h>
- #include <WebCore/PlatformDisplay.h>
-+#include <WebCore/PlatformDisplaySurfaceless.h>
- #include <WebCore/ShareableBitmap.h>
- #include <WebCore/SharedMemory.h>
- #include <epoxy/egl.h>
-@@ -45,6 +46,7 @@
- 
- #if USE(GBM)
- #include <drm_fourcc.h>
-+#include <WebCore/PlatformDisplayGBM.h>
- #include <gbm.h>
- 
- static constexpr uint64_t s_dmabufInvalidModifier = DRM_FORMAT_MOD_INVALID;
-@@ -58,6 +60,29 @@ static constexpr uint64_t s_dmabufInvali
- 
- namespace WebKit {
- 
-+static bool isNVIDIA()
-+{
-+    const char* forceDMABuf = getenv("WEBKIT_FORCE_DMABUF_RENDERER");
-+    if (forceDMABuf && strcmp(forceDMABuf, "0"))
-+        return false;
-+
-+    std::unique_ptr<WebCore::PlatformDisplay> platformDisplay;
-+#if USE(GBM)
-+    const char* disableGBM = getenv("WEBKIT_DMABUF_RENDERER_DISABLE_GBM");
-+    if (!disableGBM || !strcmp(disableGBM, "0")) {
-+        if (auto* device = WebCore::PlatformDisplay::sharedDisplay().gbmDevice())
-+            platformDisplay = WebCore::PlatformDisplayGBM::create(device);
-+    }
-+#endif
-+    if (!platformDisplay)
-+        platformDisplay = WebCore::PlatformDisplaySurfaceless::create();
-+
-+    WebCore::GLContext::ScopedGLContext glContext(WebCore::GLContext::createOffscreen(platformDisplay ? *platformDisplay : WebCore::PlatformDisplay::sharedDisplay()));
-+    if (strstr(reinterpret_cast<const char*>(glGetString(GL_VENDOR)), "NVIDIA"))
-+        return true;
-+    return false;
-+}
-+
- OptionSet<DMABufRendererBufferMode> AcceleratedBackingStoreDMABuf::rendererBufferMode()
- {
-     static OptionSet<DMABufRendererBufferMode> mode;
-@@ -73,6 +98,9 @@ OptionSet<DMABufRendererBufferMode> Acce
-             return;
-         }
- 
-+        if (isNVIDIA())
-+            return;
-+
-         mode.add(DMABufRendererBufferMode::SharedMemory);
- 
-         const char* forceSHM = getenv("WEBKIT_DMABUF_RENDERER_FORCE_SHM");

webkit2gtk3.changes

@@ -1,3 +1,15 @@
+-------------------------------------------------------------------
+Thu Sep  4 17:40:37 UTC 2025 - Michael Gorse <mgorse@suse.com>
+
+- Update to version 2.48.6:
+  + Fix emojis incorrectly rendered in their text variant.
+  + Add support for font collection / fragment identifiers.
+  + Fix web process deadlock on exit.
+  + Fix stuttering when playing WebP animations.
+  + Fix CSS animations with cubic-bezier timing function.
+  + Do not start the MemoryPressureMonitor if it's disabled.
+  + Fix several crashes and rendering issues.
+
 -------------------------------------------------------------------
 Tue Aug  5 00:25:23 UTC 2025 - Michael Gorse <mgorse@suse.com>
 

webkit2gtk3.spec

@@ -76,7 +76,7 @@ ExclusiveArch:  do-not-build
 %endif
 
 Name:           webkit2%{_gtknamesuffix}
-Version:        2.48.5
+Version:        2.48.6
 Release:        0
 Summary:        Library for rendering web content, GTK+ Port
 License:        BSD-3-Clause AND LGPL-2.0-or-later

webkitgtk-2.44.2.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEAToBJ6ycZbNP+mJSbBAJtpOXU5MFAmZF9iQACgkQbBAJtpOX
-U5ORGQ//ZZJ0eviTeoGMmxzwbnGHPuusinRUsR7Tc6U1nN+Q9AFspcTQyCrj9IEB
-fsyV9Kcu7v8FB7HQvguY1mkyUSNTiteKw9YwvUtqqrrFoYAnVKTReUEnt38SUWWT
-LiwcQ3D13OiVqywRRrNalo7BqzfqoOylhDwdIg1D7w6HCHNxlhAaw71b9TRinZx4
-a3WyfPz3E1lnEIzU2djsZv3lhQJa6tHR39pCXacXQGU35v88VbZ3mHeUyche6sQ0
-BC+6IB1nphyO2/pLcYPv7Dp9IFEnTTl3A44v/7Zaj3eLX0+6GdZuuUc9x22+Sl+6
-IwZ5AjQOXw8+tGNTkGbWnD3kgRc14s+uCNJ8qEjSmv/oN3hUEh3vf4+pL4gDgGYi
-jVQe9uIjQO5AfgEFTumMfTaeN5MgvWGTPjtPhjfN3MyKgkU+I3qrdt+fHH57HUeJ
-TiWkHFxgI32ucjRjdQ1YqZ5sUna/5uKKyxufa7hwOzwYumhFcouMzAqBxJ+96X7n
-tL0/j+JZHmeJwCHUdIaTnTh2pYFZ4HFfJqcXda+xq43wNAM7qKMjps6h+szNKSo/
-9xBEFpuWyV7xyCzGQ3Ul/S/DZ1dr/UQrK8SA9EBjVhsVQTmoxf8A+QK/LJqmtHwA
-dfkKRYwQ6qedeESVJ2+HCzvZnxhKyU8cSgvI2Yz1pe7C3zFJv3o=
-=unwr
------END PGP SIGNATURE-----

webkitgtk-2.44.3.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEAToBJ6ycZbNP+mJSbBAJtpOXU5MFAma7BpQACgkQbBAJtpOX
-U5PeIxAAhv6cl4WsiFyPuNQdzik1GdxtSuFxpBW9SokOxFPn4zW/sMIkke20q1et
-RhGwKskkuOEgavV/2grC07d8peFbsse6zTeerZECRaB+Saj7ZOWoZQoDbCTxWjzi
-yoxsziwIJA4LDdhqxV8TRSCl3bLy+uFQkUfNX1JJot9bMze+9lUjxJ/hAglCUjP8
-WIJdQ1mE+cJguBHJMfdZbDINLywRjesaLXAvTCmpnn3mn0GXMbCQM+W+GCybwhMB
-1dl8eFEfcvAhUe85mHJNW3WmYRzvquTMuFuLzU8b1U1/6+LQc+IOXAZEpkP9ztSn
-VItLwPnHJ/4g5KY+gUonMxZ1LMhTwiu/ga41Yez0sZftkC6tgIPIldaTY/tjeNLh
-C5GnMSyRTJ7d2ywLJSdzCIGkwhOJ7oHArGxbpzCWft3rrU8SbvQd3dGOMip1iniN
-ewdMyoqZQgzN51BRUklhjoBCaUkcVbgYr6qfLZiU42kR4RWgrTx/s//naCM4peQe
-8vGeRlF9zpsGw3ivCJBNjqk9SrqcPQ2i52lgKs28DkVy13duuQwKEMa+/Tv7eH60
-wNdKSRjeA81DLZkuyX5yJOEJ1pru1HiS4sdP112dPb1HajVhOehZJc7a8b9ohOH5
-go2lIxnJjZOXRHM/JwtTcLKsnfna1m6yzNGdOHNcLKPJodHcpXY=
-=jHOh
------END PGP SIGNATURE-----

webkitgtk-2.44.4.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:2ce4ec1b78413035037aba8326b31ed72696626b7bea7bace5e46ac0d8cbe796
-size 35858056

webkitgtk-2.44.4.tar.xz.asc

@@ -1,6 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iF0EABEDAB0WIQRao7wzT9fjNp58d7KRxVnb5MkSOwUCZt6j0AAKCRCRxVnb5MkS
-O8uuAJ4hLC/UXFDJsanfXyaQ6/y3hf684ACdEdyKE/nxBYL9dQEzL/50xEBsl5o=
-=aQH7
------END PGP SIGNATURE-----

webkitgtk-2.45.92.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:753f6c638c72633f22305a606dbd6c825b8fde3a7d01184a8f18f740493ca79f
-size 42757216

webkitgtk-2.45.92.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEAToBJ6ycZbNP+mJSbBAJtpOXU5MFAmbVem0ACgkQbBAJtpOX
-U5Mhow/7BbBjIf5ZUZrhRxYB0mxiezZU5fBBd/Dn9jugCI+NiZ+U403/MQfdFmey
-ZmntQSEwBhRH0tVEUfizCKkP6IOzZCOYt/eBmF+ecFJedoMsNT2P6YHWSRyoi2wo
-5ntCQQHlbGlbr1qLw9jXg83m8mV5/BDWG0QhpOrylfh3O+Dhj/z9h9PGFJ/FNxrQ
-bgAEmzvfS/sQk/mvwvKKbUG4O2hIJbW8QEzwhwXAJz6dHaXMHpnCi2QOzxBqGsif
-hTKvi1n225c6lvzX+mj788zCB4H7/sRKHzKN4iHBBZS42uddm1zE9NXPQjdfT0Ex
-YmSABnEjkg/fmKSgpnI2clmxvLXJsK5g5d53FF/b3CXop80u+BqSfs3Upa6g+/+Z
-9wlbeeJc/++XbaAOCB98fmeCTWohE8nDFPGOG1FNLsQZjTKb6SKK/lSD0u+Jo0wV
-I0jnBqwpsuH9tFVQlIBom7pAWZ3cq2mVESLzZXnCa33TAuh+AhAhURxNeYTLukWb
-VT4gLerC8GtKHx3mONVDI2JYXs8WqYlmbY3GjhKYZqsEBCKgq+YP8tWM9/U1ZHp+
-sg0SRCjQm4M3RObE7LBX9XwnSUpMs33KCHZa3Gy4AEz2IsFOlRN9DwaMrmI4nrDf
-eSB7x0QOYswlPNnzX7yl2wfTQzezo/pbcxtXolUFOPWY2NaHZHw=
-=WcF7
------END PGP SIGNATURE-----

webkitgtk-2.46.1.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:2a14faac359aff941d0bc4443eb5537e3702bcaf316b0a129e0e65f3ff8eaac0
-size 42776840

webkitgtk-2.46.1.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEAToBJ6ycZbNP+mJSbBAJtpOXU5MFAmb6Z+AACgkQbBAJtpOX
-U5NlAw/8CHhuDyRYXXA40eq/bBGdeqKprVXAMPReGMulG7ZPd4qu1eokED7XZCdO
-HUe/3Mdzppo/B9gqpPuCnb57/e0b6ma1E66bsHCE33+uUxy1n22kT43gsdEO7etZ
-toVMK/QUMhMEgwfJkXGIW8odIcvoqYKP9C0sMdpdhGbNr+OBRMJmk6eWAAhNP/mj
-csx3xUpBzCJ5vlDCfinYlOhPm2Bl40QgED6yocaMa6rlt/gOj5ctwr97v9BaU3qG
-OZKP6o9nOAh5aUbHdyFADg7CMP7opqBMpH+yBg7pqQQ73NnKNw9jPp6shWanOmKk
-FFSU8QgZu5lSvp/I3cBaSY0+QuQmUBeq1wFSlrKw8YmVZgFspj7i1WVfu4aDFdMQ
-1VeEG4atsKatS+oeW0h6NGhWjlIYlaKqB6Vylb/fv3/RvaRocSkWEsMikipf6dWX
-0KuBvf9Jr/6wSA62XuGqIPUxLjbRirGdADVQGqb4Yvk7spok8JnQGdxqixgfbuWc
-xURun7A3B6S5y4/UHARSmLyXqmO55o6bT1iuIlbzK06rd9AWfA8CgLNUySVsdWzO
-HHGvLweSeMDS5dlVr4vE0eczUICBtl6TB6A9ydsxTj1TvmgrmDlBVls5XWFK0vcs
-ErTeBoMPCjYcjD8lqo5O7nr0uDMNHLYlEvaq5t5EYVZergylVPo=
-=WrNA
------END PGP SIGNATURE-----

webkitgtk-2.46.2.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:5aae1c5c0a30d5e9c5831652b6f1bdefc31d75e0ad81cb40185b0aed92ce79b6
-size 42803728

webkitgtk-2.46.2.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEAToBJ6ycZbNP+mJSbBAJtpOXU5MFAmcWILAACgkQbBAJtpOX
-U5PrLhAAj7+VKmBfCV9pHsnla1zxC5O6pkgKhT1N0p/MMY7aKCLRpmGMrc2XEhny
-i/M5+O9ZIQkzImJ0vgLF3nSFsESPj2t3wljnapEwQtZKw/9KxM3O+A3RA19tKRfj
-t+16ot/QijHT2k9EcGkdfFeq5SWfTAtwH13Q9LxRH0hmohC7d3s8OVpiVUptVXii
-R15GsuOj7EmR+QGzVRfbdpBEXGqglEJHJ5qzMFIoCqFbIAilXr6C0NbzED2pbNd2
-CO8e4Q4FpxPbN2Y9W4P77uoyonc3tJbAUVPKJOcIicAH4ex/e0J8OwLpvRLY7xRp
-UJczw/PfZ0KWO6rf55h4q0Q7wLCt+wsxdtkP+hinxELKc4eyo/xxsvFMDXA0VBzE
-c353GC3pg8C0LRXXHXuVxGlRDyjq0RXT3IWMrDyv9SCS9GO0t2FfChc9MCtKrvQE
-mfS2tzFjfhVamSphl8oj6Nge3W6qHnq9nC3+HbjQBMgHhusIiYEdKPmbNz/beweX
-xmJReJdX+xmCC3FsWMx2aAjy8NbWZ638ee2Xv0h0Uq9Z7w96WRIqUNb4fvtGk+xe
-OInQTFp8/d9N54C09AdEQuK3LMnObpuS/VFdIJgMA6ombdmgWYHomLW9AGjpHUpw
-8vI5KTGf5uaMVmPmu+LTeoF3NGP7hPldMLS50A9zj+C2DijjT1s=
-=jVoY
------END PGP SIGNATURE-----

webkitgtk-2.46.3.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEAToBJ6ycZbNP+mJSbBAJtpOXU5MFAmciLBQACgkQbBAJtpOX
-U5MFsBAAqwUuPEkirbQXxESAu8nJKUG3RVa4y3c1NaTRETW19cy/32KeiBlxbWW5
-UKF2gKlu5B+mJn9f0hebYBUkqr6HdWO1JnBz3XNXZ7dNObTWlN9g4T6tlqsxAdsk
-B04ddWFQKYQJ4pMLjlxVFkFXQ0vh9UywBwUyGXrqg9yo2OcSGpsqdujyZfdlWrHc
-0kDLow9SYM5XhkzFoQxKlYsVg1vhzpTxDuv39JqVTGHlX8pEplpCsrMwpVQ+89aP
-zv64u/xnPAEsN4wGeB0QyH6H0llukTmrgWUfoRqeDLHMGAeuHe1yONGyK5fWA1u+
-ABTsjVnh5nOQxUZaNc3dpMdUcrp+kVhjKDwMOhKNbfVoLWxchmU5VvrCoytRAX8i
-4js2xOgnMk26cNB4dZsMg9cYH4Zr+nkfkjGljGXRSvexF8iBUc2Dv0scrtDh3ArI
-aWk4eMyO5nRPIFWE6j5d+sAm1TF1hGMW33beYOTy5Iqm2l2inRoaxGdAz2ZFjF5S
-xcjG7tT3+pG8WXPhJ0Tl41mPJKg79tY3F0uzSedtJ+J3q4uRKORFOdChtDbqHHT7
-mI0jT6rrGckXlncufvg19RiCnmP8vmZEyeuTZja6vBsV3pA7Uc/IWcWEXi9ip/om
-grjX+68/ypghS571sFxrjQaNdqrO0fwMrJBZxhgelJKnykvoj2Y=
-=wug0
------END PGP SIGNATURE-----

webkitgtk-2.46.5.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:bad4020bb0cfb3e740df3082c2d9cbf67cf4095596588a56aecdde6702137805
-size 42898600

webkitgtk-2.46.5.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEAToBJ6ycZbNP+mJSbBAJtpOXU5MFAmdil6QACgkQbBAJtpOX
-U5Nthg//RtCZwZ0GMb77nKhX+4lkb3aEghkx0Lug4akvISFIVZavgK3VWPHObV+T
-rA0OqDnlTWEDGkOCLvlmSBk0y9wpT5kdqr2vSNhcPPaZtE2dYLbSirWurkPVpq5u
-bsLlkp6Yf6/MGEt3sSbH9OVIfu++hkMrx136wuKe9NU/gP0NTiNz5T3Yn9OvtcaF
-g2FX2tAgiBXhXPvKGAWz4HiQBEEjhTtksxhQkC3gHkGXINpPTxH3wj2Tn0gJOb1u
-FBLZoEFKD0eklspl0Z0PyWReyn/WvEHTy41kCRENWACekZZUM4DS5fPW3lrEY5iu
-260NfK1cQ/T+RcBj3/btm0852PgWdUH81lQjKI0iDTdgvjEQQqkgC8LH4w2GW/V8
-TpkT/dghgqrVmlL2ZDrDcFurcieaOEkATqavuUzAWmsLQrh/+4HF1Djoz5yDakhT
-gogjkzV53Nj8e2atDoMA+vMLXYIXM0hRQ/MGyJF2lfMzTEgkfGtMfOTwMvFaLhGr
-PcwGMWDH2W6glQj3/gdJwr0tn4nHsLpxL60i/aaP3yHbncj/tkqY9rhA76kHVj1M
-Z7uSwspFG6J3ZtYT9kv1MbNeODdOw0q2erZhE5BpDMJuJ4m1qbsE3TqiED5C6jSg
-IMpYfteEZ4CSQYMmzFl8LrHU71lRyjeTfsJTA0CvHBBGLHsoz4o=
-=uvXQ
------END PGP SIGNATURE-----

webkitgtk-2.48.0.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEAToBJ6ycZbNP+mJSbBAJtpOXU5MFAmfT9AIACgkQbBAJtpOX
-U5Mb7g//QDO1MLeOt6P6R7ifagp1Uxh/6JWakLrZQ7b5nDDaOmWRCa4XR3WSB585
-hvpmRXGEsdJz8/KoLe4V32ccNdgSrDxJEHAKKumyH/EJM4J3hRMhGuYdMb98a9JQ
-bmVycCYjxhwD7iL0p1d206gwDL9XuRbC+nEVZWUByCm8Pu/MRO6WARxv1QIJjg+q
-0sRU9bmj8aiDMceXb7S4L7w6ZgP+i97lnrQJfavHIM5o7y/eZs3xCz3JoG3+xSCb
-EReJczWOnjc2F4ZUC1ZacEEfZJon0PHRvUISW/hKtnnGSdDSSgSEByZtTlgxdOHs
-4klfsYF8tPG3S1HtlUIwQRQXv1hUTHa+Aqqz/q/ol6JROJKXYDVNO57/WiETbZx8
-0Ymdb/651lfUwPSRI+azJOGBwYPdWC8uath1l+D9+nKLRemAFDUIpbO35k0/ss8g
-O72mRoo46hHdGarOni4B9OYNL7PPkPvcsW1wMebEiiEb1dFmRmDZqnQE8mIL1oLg
-emh9ZnpWsEBxCSVpTdJ6lX940kr8w1BaPquJh0CJTUeabPc6hQ3k7vt95FxnyNpV
-t+8l1Fd9KVvO9sqBkx52ZsR6HijrGmc53K7MHqe6qiYDjKRVB4W0BUFCY3YU3JRA
-xsKpx5raiz1z/se0Z/m4aIA/Vm9AACFZDHxoKI/U2RWPk/MV80A=
-=cmyU
------END PGP SIGNATURE-----

webkitgtk-2.48.1.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEAToBJ6ycZbNP+mJSbBAJtpOXU5MFAmftAf8ACgkQbBAJtpOX
-U5PdBg//TpfUIuSwl5OgwqsB8WNvrtCdGGwrYa3k9E9pp57KHLvlqNeDmToy/U9t
-gAOIUIyIxgVBRgJQrcQW/NfPx49jd3ISt9h54A0c/MgIb4+4vsvoRz3pwX407+QR
-7rZA72GA1im3u5+IWTGeeWzTGNQtvGbd1DzA6OpdvC0MRS2JAfYvgDHyAzaQu0Of
-JZdMrZlwoaMeZDTKI+qV/ZY2mZ59xiD0ltRU6X1B7/YS2MEsqztO7FFWO/xuhdps
-qIZF/jwuVfcGrI5JPVZzsf0V2RHmgF4j9rNEZwSxP8BkWfYQ+BjZI6gzKjVgDYED
-6D70tf0+q9UqSSYaX0Wk2+IqaNiO09md4nYZJ1I6VLz8sm6AZTB2XXiWxB3hEuFO
-j7Dk11I4DKPJjBHIQN/3kqutvRG5plyi4HIL2BzvnVstxrlTAocIFvhey1GOiLSu
-UfX97ruyNECpwMIafxCsqOVAjg4wkf6df0yCJVokNRBunnsQPABjDXfhS7dDvE3B
-6u2BIVudba2xEeMqqHZBrFAy4UXLcfJYnvvsBbPGFHibooCIuwd5VrTIVUE7bsI1
-QqEAlryx1grnyDN77aHri2bBK44aHMIix19kRgwdK8wcT3iz1vdUcgigcDYbD2Sc
-0LGzxB5OY+jd7zvSczqNCX6Ll7W7dIgjR60nuVl4+yYNnzSM+EM=
-=6kwl
------END PGP SIGNATURE-----

webkitgtk-2.48.2.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEAToBJ6ycZbNP+mJSbBAJtpOXU5MFAmgkcDwACgkQbBAJtpOX
-U5NEhQ//Vdb5/kLRogQVuCz5+Ghx5efS4v7zLVWR2fOnpgLzQlZEdSWBMN89h0df
-R8kAP3mb0eiwHJMJwhM0wB7AfwGpPWsKp8hhoQxBeMaSWwU4Wm/n/b6IrawuiPtq
-6I+1nzLU+eqZ6pgOdEUblD8QOwW42cCO6IlHX4jEVJoYzOPSyQ6spGXO7WLO5rhb
-WvUaYat9ddZyRIHQKrNjUm+XWwkvV5XI0wXHzsamA8+p+fUwP0pNDx1CzemhveOL
-PaB9Xxu4f634j38HIzl9EsL78Aay+6uUyA3VYsvXtJxkP/1k1VJKyyGMZykaokgh
-OMoPMoKZND9koAr7lAObabCdqe5+EXQNZLw0ydl9lKQS5Ps6/r0OfPIl+G6xXMlJ
-/CSyqwl4Pwt5M4BthgJFL1wV6z6pOgYhFYd4Q30Z4dgJTxZSWiI9ygSuo3Sp0+Y+
-W95BP0IWaqZlofhUXbc38PMgBlyEBlSgBZ4wf43vv4Ro5Gwfq5CF8DIOpkEj8hS8
-z7TG+Hb3CYgTcss9VV9ZtckVI6DP0p4ScBQtPQrRckXyFDo1kukgCxzkzRZf+BZJ
-XeUDGSuxxSeH2mSQRWe/Bw59RZf/1H3ivsuHQn7WNohHfIV+Uc0bPtVa31lGAeqr
-q5iPxAe9Spsp4i/Bs/a1YXzP2uTWjknBryF07QVVcLf6XcgYEtI=
-=k7du
------END PGP SIGNATURE-----

webkitgtk-2.48.3.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEAToBJ6ycZbNP+mJSbBAJtpOXU5MFAmg26CoACgkQbBAJtpOX
-U5N7Ng/9HAO3gM/ND9M8WW5/OChxZCZ7Xe88UBDd3ncNeDvIEsq/A3WeVId7yXpr
-ta1ynsZM3ws/3zaEWNIXHoCDgDXeca0tYCiJN0VkFxXZqDpbgM8IaEZbF0HibdJA
-/lX4YyF5mTvM1h0lTrdHpDHUxdqKRRNKX5VdlDdRSZyNAkJsP+ryeGudUW62MvP4
-VBXvK2ZSLdBFTY+ddc02MOaGKg6ToVo2PMQtDMJd4ujjQZ+F2H66Cbp4lthdx8JA
-skcfHbVjsqLsUwBPtmYIEueIYn0x8mwyxS9ZIkVtsC2sMS9KyLOv5Tzig7VDaGJy
-YcrVWUWc5OSKa23QZrCWqIkYyhlTGlhmcVHgO3C9mXjmAt8EGycrSW4HWFMeq6d6
-pz7otK0ZGWqaJVybpJcJ4QtLn5i+qf4wEIotQIBwOnb3EZiJ4aKpy5B+auS9q+xl
-xpHP7eEl8r+R0CywwWYHFVRJn22jYSzcD5rF8lp3B4vj2Pn8sWN95ineUHICp9um
-8Z4DRDjhwmOgtg4Fsnp0ZOLCqsYua7psJQ24RZ8MTxzReGbX7kOlE9l2IvsPoiR/
-9ENPaYChpeChaIlv1RsyvX785wl8mFxZLrxGG3JXf0kcDLd5SQ1xv2W0n4zqrzvO
-zj2Yozkv/BdXPXiWuhCIF69qIlgxs2UM6f8AJfJ5/StDoPpY2aQ=
-=3Phy
------END PGP SIGNATURE-----

webkitgtk-2.48.4.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:f62c1077d3a0f63d50259a802d1143be5d4d0c7c4c05e581819af1ce935afab3
-size 42745624

webkitgtk-2.48.4.tar.xz.asc

@@ -1,6 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iF0EABEIAB0WIQRao7wzT9fjNp58d7KRxVnb5MkSOwUCaIlFnwAKCRCRxVnb5MkS
-OxF1AJwMOGG9u1NySOZElxO7f90r9415rwCfR9WwKQ955Njeji5VCoh/2Kp27Zc=
-=FIgC
------END PGP SIGNATURE-----

webkitgtk-2.48.5.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEAToBJ6ycZbNP+mJSbBAJtpOXU5MFAmiMe7UACgkQbBAJtpOX
-U5MrwA//TJ0W7S9Nbs2p4OIs6lQv+ntLrTVZAKFu+AUYJ/r3sUp9awGGivS37ZC8
-gh33JDqzt9pm1sVXGNTB8NmEcRUu9QfsEsJUUEnk7n6dLmQr8Cb7aXK8b4ma8Mgo
-zLpuU5rHPtZ5Cx7Y3wXw0mNBf2ZcvHrFfVhDrrgziIMUu9dcuOVI3inEvfh8CKcO
-a+j+j1qNvxLGgPOfkXZH/cvGckCLxJuQ+/aX0k/3Top6mSHJTeMxtU7K2bSkgQmC
-GoSoRqOFLPBp2UxAKWYcgr8kh7wjt5mov3NtNyMmCC6bjwtwX3ClLjgQfHekS5Iu
-niPm9Q/FoF1JSbiXrpPf8KZVTUg9D1lzQFvJYHl9w5gWGE6wgjxX7TM1ooYvW0Gr
-v9FBDIXGlXid+hBx8j0igRQW/V6sH5uSt690m5ElZj4KkJ6+uhLkIMcSGc6HYWhI
-vtCNytTGd9wsAB97bYvcJv/qEW94hnGSdE0HvarAcdZbO52oljOAtqzaYi7Hw111
-expNG3FU98UTWX0LHsv1c5/z9ph7x5EFyipkBML5J9LT8KV/+IrXPBkXQ45yaf3D
-s+KpRlkxFGj9uFhRgl4OLR4UrSfgEkrAPnVud2zrIik+A4mHgX9y8FKmktFioJhU
-faiEXzPzrHgMeEtlJW8vvWVoO9ZgIsYKma9sOn8aU/f7yjFak4I=
-=KRFp
------END PGP SIGNATURE-----

webkitgtk-2.48.6.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d9ac3034b7a39c2aaa567e6112b3124b158e591a74439e46974a031dd0e44e24
+size 44127356

webkitgtk-2.48.6.tar.xz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=kyUQ
+-----END PGP SIGNATURE-----