CVE-2024-27850

diff --git a/Source/WebKit/ChangeLog b/Source/WebKit/ChangeLog
index 30328cf6e845..c83f5658a6fb 100644
--- a/Source/WebKit/ChangeLog
+++ b/Source/WebKit/ChangeLog
@@ -1,3 +1,13 @@
+2020-12-14  Carlos Garcia Campos  <[email protected]>
+
+        [WPE][GTK] Should enable WebProcessCache
+        https://bugs.webkit.org/show_bug.cgi?id=219689
+
+        Reviewed by Adrian Perez de Castro.
+
+        * UIProcess/API/glib/WebKitWebContext.cpp:
+        (webkitWebContextConstructed):
+
 2020-12-13  Yusuke Suzuki  <[email protected]>
 
         [JSC] Introduce vmEntryCustomAccessor and vmEntryHostFunction for JITCage
diff --git a/Source/WebKit/UIProcess/API/glib/WebKitWebContext.cpp b/Source/WebKit/UIProcess/API/glib/WebKitWebContext.cpp
index f7faa5880bf0..acf9ccdb6d12 100644
--- a/Source/WebKit/UIProcess/API/glib/WebKitWebContext.cpp
+++ b/Source/WebKit/UIProcess/API/glib/WebKitWebContext.cpp
@@ -391,6 +391,7 @@ static void webkitWebContextConstructed(GObject* object)
 
     API::ProcessPoolConfiguration configuration;
     configuration.setInjectedBundlePath(FileSystem::stringFromFileSystemRepresentation(bundleFilename.get()));
+    configuration.setUsesWebProcessCache(true);
 #if PLATFORM(GTK)
     configuration.setProcessSwapsOnNavigation(priv->psonEnabled);
 #if !USE(GTK4)

diff --git a/Tools/TestWebKitAPI/Tests/WebKit/AdvancedPrivacyProtections.mm b/Tools/TestWebKitAPI/Tests/WebKit/AdvancedPrivacyProtections.mm
index a72c56140bbb..e322eb865738 100644
--- a/Tools/TestWebKitAPI/Tests/WebKit/AdvancedPrivacyProtections.mm
+++ b/Tools/TestWebKitAPI/Tests/WebKit/AdvancedPrivacyProtections.mm
@@ -877,6 +877,7 @@ TEST(AdvancedPrivacyProtections, AddNoiseToWebAudioAPIs)
     checkFingerprintForNoise(@"testOscillatorCompressor");
     checkFingerprintForNoise(@"testOscillatorCompressorWorklet");
     checkFingerprintForNoise(@"testOscillatorCompressorAnalyzer");
+    checkFingerprintForNoise(@"testLoopingOscillatorCompressorBiquadFilter");
 }
 
 // FIXME when rdar://115137641 is resolved.
diff --git a/Tools/TestWebKitAPI/Tests/WebKitCocoa/audio-fingerprinting.html b/Tools/TestWebKitAPI/Tests/WebKitCocoa/audio-fingerprinting.html
index 11201a33ae54..108373919a07 100644
--- a/Tools/TestWebKitAPI/Tests/WebKitCocoa/audio-fingerprinting.html
+++ b/Tools/TestWebKitAPI/Tests/WebKitCocoa/audio-fingerprinting.html
@@ -32,8 +32,10 @@ button {
 <script>
 function combineSamples(samples) {
     let result = 0;
-    for (const value of samples)
-        result += value;
+    for (const value of samples) {
+        if (isFinite(value))
+            result += value;
+    }
     return result;
 }
 
@@ -145,6 +147,109 @@ async function testOscillatorCompressorAnalyzer() {
 
     return combineSamples(bins);
 }
+
+async function testLoopingOscillatorCompressorBiquadFilter() {
+    const sampleRate = 44100;
+    const cloneCount = 40000;
+    const targetSampleIndex = 3395;
+    const stabilizationPrecision = 6.2;
+
+    async function getBaseAudioFingerprint() {
+        const baseSignal = await (async function() {
+            const context = new OfflineAudioContext(1, targetSampleIndex + 1, 44100);
+
+            const oscillator = context.createOscillator();
+            oscillator.type = "square";
+            oscillator.frequency.value = 1000;
+
+            const compressor = context.createDynamicsCompressor();
+            compressor.threshold.value = -70;
+            compressor.knee.value = 40;
+            compressor.ratio.value = 12;
+            compressor.attack.value = 0;
+            compressor.release.value = 0.25;
+
+            const filter = context.createBiquadFilter();
+            filter.type = "allpass";
+            filter.frequency.value = 5.239622852977861;
+            filter.Q.value = 0.1;
+
+            oscillator.connect(compressor);
+            compressor.connect(filter);
+            filter.connect(context.destination);
+            oscillator.start(0);
+
+            return await context.startRendering();
+        })();
+
+        const context = new OfflineAudioContext(1, baseSignal.length - 1 + cloneCount, sampleRate);
+        const sourceNode = context.createBufferSource();
+        sourceNode.buffer = baseSignal;
+        sourceNode.loop = true;
+        sourceNode.loopStart = (baseSignal.length - 1) / sampleRate;
+        sourceNode.loopEnd = baseSignal.length / sampleRate;
+        sourceNode.connect(context.destination);
+        sourceNode.start();
+
+        const clonedSignal = await context.startRendering();
+        const fingerprint = extractFingerprint(baseSignal, clonedSignal.getChannelData(0).subarray(baseSignal.length - 1));
+        return Math.abs(fingerprint);
+    }
+
+    function extractFingerprint(baseSignal, clonedSample) {
+        let fingerprint;
+        let needsDenoising = false;
+
+        for (let i = 0; i < clonedSample.length; i += Math.floor(clonedSample.length / 10)) {
+            if (clonedSample[i] === 0) {
+                // Intentionally ignored.
+                continue;
+            }
+
+            if (fingerprint === undefined) {
+                fingerprint = clonedSample[i];
+                continue;
+            }
+
+            if (fingerprint !== clonedSample[i]) {
+                needsDenoising = true;
+                break;
+            }
+        }
+
+        if (fingerprint === undefined)
+            fingerprint = baseSignal.getChannelData(0)[baseSignal.length - 1];
+        else if (needsDenoising)
+            fingerprint = getMean(clonedSample);
+
+        return fingerprint;
+    }
+
+    function getMean(signal) {
+        let total = 0;
+        let finiteValueCount = 0;
+        for (let i = 0; i < signal.length; i++) {
+            const value = signal[i];
+            if (!isFinite(value))
+                continue;
+            total += value;
+            finiteValueCount++;
+        }
+        return finiteValueCount ? (total / finiteValueCount) : 0;
+    }
+
+    function stabilize(value, precision) {
+        if (value === 0)
+            return value;
+        const power = Math.floor(Math.log10(Math.abs(value)));
+        const precisionPower = power - Math.floor(precision) + 1;
+        const precisionBase = 10 ** -precisionPower * ((precision * 10) % 10 || 1);
+        return Math.round(value * precisionBase) / precisionBase;
+    }
+
+    const rawFingerprint = await getBaseAudioFingerprint();
+    return stabilize(rawFingerprint, stabilizationPrecision);
+}
 </script>
 </body>
 </html>