Michał Janiszewski 0da634d6e7 Fix #26310: crash when multiple subscribers register for the same event (#26315) ...

The scripting engine's `ExecutePluginCall` by default frees its `JSValue` arguments.
When `HookEngine::Call` iterates over multiple subscribers, the first call would free
the argument, leaving subsequent subscribers with an invalid pointer (use-after-free).

This commit fixes the issue by duplicating the `JSValue` for each subscriber and
ensuring the original value is correctly managed based on the `keepArgsAlive` flag.

A new C++ headless test `ScriptingTests.cpp` is added to verify the fix and prevent
future regressions.

2026-04-05 19:57:00 +02:00

..

tests

Fix #26310: crash when multiple subscribers register for the same event (#26315)

2026-04-05 19:57:00 +02:00