From d70f4363044663b03066feaaa074bd910ecfcaee Mon Sep 17 00:00:00 2001
From: Nikolay Govorov <me@govorov.online>
Date: Tue, 17 Feb 2026 11:39:09 +0000
Subject: [PATCH] Fix use-after-free in Fetch

---
 src/browser/webapi/net/Fetch.zig | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/browser/webapi/net/Fetch.zig b/src/browser/webapi/net/Fetch.zig
index da191d79..2eea37e3 100644
--- a/src/browser/webapi/net/Fetch.zig
+++ b/src/browser/webapi/net/Fetch.zig
@@ -205,7 +205,8 @@ fn httpShutdownCallback(ctx: *anyopaque) void {
         var response = self._response;
         response._transfer = null;
         response.deinit(true);
-        self._owns_response = false;
+        // Do not access `self` after this point: the Fetch struct was
+        // allocated from response._arena which has been released.
     }
 }