trop[bot] 3dcb641a99 fix: crash calling OSR shared texture release() after texture GC'd (#50501) ...

The weak persistent tracking the OffscreenReleaseHolderMonitor was tied
to the texture object, but the release() closure holds a raw pointer to
the monitor via its v8::External data. If JS retained texture.release
while dropping the texture itself, the monitor would be freed on GC and
a later release() call would crash.

Track the release function instead of the texture object. Since the
texture holds release as a property, this keeps the monitor alive as
long as either is reachable.

Co-authored-by: trop[bot] <37223003+trop[bot]@users.noreply.github.com>
Co-authored-by: Sam Attard <sattard@anthropic.com>

2026-03-26 00:49:57 -07:00

..

app

chore: bump chromium to 146.0.7666.0 (41-x-y) (#49543)

2026-02-17 16:19:16 -05:00

browser

feat: add accessibilityDisplayShouldDifferentiateWithoutColor on macOS (#50408)

2026-03-25 15:53:31 -04:00

common

fix: crash calling OSR shared texture release() after texture GC'd (#50501)

2026-03-26 00:49:57 -07:00

renderer

fix: read nodeIntegrationInWorker from per-frame WebPreferences (#50134)

2026-03-09 23:26:10 +00:00

services/node

feat: enable WASM trap handlers in all Node.js processes (#49839)

2026-02-18 13:22:36 -05:00

utility

fix: broken OOP window.print() on macOS/Linux (#45214)

2025-01-20 10:23:44 +01:00