CVE-2024-54658
Overview
Advisory: Apple Security Advisory
Impact:
Description: Processing web content may lead to a denial-of-service
Researchers: anbu1024 of SecANT
| Attribute | Value |
|---|---|
| CVE | CVE-2024-54658 |
| Bugzilla | 263758 |
| Component | WebCore |
| Bug Class | LogicError |
| Severity | medium |
| Commit | 85133f0883e415c6… |
| Advisory | Apple Advisory |
Root Cause Analysis
The issue was addressed with improved memory handling.
Files Changed
Source Files
Source/WebCore/ChangeLogSource/WebCore/page/RuntimeEnabledFeatures.h
Patch Preview
diff --git a/Source/WebCore/ChangeLog b/Source/WebCore/ChangeLog
index c3e287485b44..42adcd8a5f7f 100644
--- a/Source/WebCore/ChangeLog
+++ b/Source/WebCore/ChangeLog
@@ -1,3 +1,15 @@
+2020-06-30 Youenn Fablet <[email protected]>
+
+ Set runtime flag m_isWebRTCPlatformCodecsInGPUProcessEnabled to false by default
+ https://bugs.webkit.org/show_bug.cgi?id=213779
+
+ Reviewed by Alex Christensen.
+
+ No change of behavior since this flag is WebKit 2 only and off by default.
+ Move off by default WebRTC flags at the end of the section.
+
+ * page/RuntimeEnabledFeatures.h:
+
2020-06-30 Jason Lawrence <[email protected]>
Unreviewed, reverting r263753.
diff --git a/Source/WebCore/page/RuntimeEnabledFeatures.h b/Source/WebCore/page/RuntimeEnabledFeatures.h
index 2c8d52308ec4..79d26723fb96 100644
--- a/Source/WebCore/page/RuntimeEnabledFeatures.h
+++ b/Source/WebCore/page/RuntimeEnabledFeatures.h
@@ -512,12 +512,12 @@ class RuntimeEnabledFeatures {
#if ENABLE(WEB_RTC)
bool m_isWebRTCDTMFEnabled { true };
- bool m_isWebRTCH265CodecEnabled { false };
- bool m_isWebRTCVP9CodecEnabled { false };
bool m_isPeerConnectionEnabled { true };
- bool m_isWebRTCMDNSICECandidatesEnabled { false };
bool m_isWebRTCH264SimulcastEnabled { true };
- bool m_isWebRTCPlatformCodecsInGPUProcessEnabled { true };
+ bool m_isWebRTCMDNSICECandidatesEnabled { false };
+ bool m_isWebRTCPlatformCodecsInGPUProcessEnabled { false };
+ bool m_isWebRTCH265CodecEnabled { false };
+ bool m_isWebRTCVP9CodecEnabled { false };
#endif
#if ENABLE(LEGACY_CSS_VENDOR_PREFIXES)