125113 2013-12-02 15:23:53 -0800 AX: Crash in accessibilityRoot when Document goes away 2013-12-03 10:43:12 -0800 1 1 1 Unclassified WebKit Accessibility 528+ (Nightly build) All All RESOLVED FIXED InRadar P2 Normal --- 1 cfleizach cfleizach webkit-bug-importer oldest_to_newest 955632 0 cfleizach 2013-12-02 15:23:53 -0800 This crash is happening to VoiceOver users on iOS Exception Type: EXC_BAD_ACCESS (SIGSEGV) Exception Subtype: KERN_INVALID_ADDRESS at 0x0000000000000038 Triggered by Thread: 0 Thread 0 Crashed: 0 WebCore 0x000000018f27bbb4 WTF::HashMap<WebCore::Widget*, unsigned int, WTF::PtrHash<WebCore::Widget*>, WTF::HashTraits<WebCore::Widget*>, WTF::HashTraits<unsigned int> >::get(WebCore::Widget* const&) const + 8 (HashTable.h:609) 1 WebCore 0x000000018f2571c4 WebCore::AXObjectCache::getOrCreate(WebCore::Widget*) + 48 (AXObjectCache.cpp:322) 2 WebKit 0x000000018fd2b84c -[WebFrame(WebPrivate) accessibilityRoot] + 112 (WebFrame.mm:2182) 3 WebKit 0x000000018fd46830 -[WebHTMLView accessibilityHitTest:] + 56 (WebHTMLView.mm:4688) The AXObjectCache is returning nil 955633 1 cfleizach 2013-12-02 15:24:02 -0800 <rdar://problem/15564742> 955657 2 218231 cfleizach 2013-12-02 15:50:13 -0800 Created attachment 218231 patch 955974 3 cfleizach 2013-12-03 10:43:12 -0800 http://trac.webkit.org/changeset/160015 218231 2013-12-02 15:50:13 -0800 2013-12-02 16:11:48 -0800 patch patch text/plain 1674 cfleizach SW5kZXg6IFNvdXJjZS9XZWJLaXQvbWFjL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2Uv V2ViS2l0L21hYy9DaGFuZ2VMb2cJKHJldmlzaW9uIDE1OTk3NikKKysrIFNvdXJjZS9XZWJLaXQv bWFjL0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE1IEBACisyMDEzLTEyLTAy ICBDaHJpcyBGbGVpemFjaCAgPGNmbGVpemFjaEBhcHBsZS5jb20+CisKKyAgICAgICAgQVg6IENy YXNoIGluIGFjY2Vzc2liaWxpdHlSb290IHdoZW4gRG9jdW1lbnQgZ29lcyBhd2F5CisgICAgICAg IGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0xMjUxMTMKKworICAgICAg ICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBUaGUgQVhPYmplY3RDYWNo ZSBjYW4gc29tZXRpbWVzIGJlIG51bGwgaWYgdGhlIHJlbmRlciB0cmVlIGhhcyBiZWVuIGRldGFj aGVkIGZyb20gdGhlIGRvY3VtZW50LgorCisgICAgICAgICogV2ViVmlldy9XZWJGcmFtZS5tbToK KyAgICAgICAgKC1bV2ViRnJhbWUgYWNjZXNzaWJpbGl0eVJvb3RdKToKKwogMjAxMy0xMS0yOCAg QW50dGkgS29pdmlzdG8gIDxhbnR0aUBhcHBsZS5jb20+CiAKICAgICAgICAgUmVtb3ZlIGZlYXR1 cmU6IENTUyB2YXJpYWJsZXMKSW5kZXg6IFNvdXJjZS9XZWJLaXQvbWFjL1dlYlZpZXcvV2ViRnJh bWUubW0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PQotLS0gU291cmNlL1dlYktpdC9tYWMvV2ViVmlldy9XZWJGcmFtZS5t bQkocmV2aXNpb24gMTU5OTQ5KQorKysgU291cmNlL1dlYktpdC9tYWMvV2ViVmlldy9XZWJGcmFt ZS5tbQkod29ya2luZyBjb3B5KQpAQCAtMTIwOSwxMCArMTIwOSwxNCBAQAogICAgICAgICBBWE9i amVjdENhY2hlOjpzZXRFbmhhbmNlZFVzZXJJbnRlcmZhY2VBY2Nlc3NpYmlsaXR5KFtbTlNBcHAg YWNjZXNzaWJpbGl0eUF0dHJpYnV0ZVZhbHVlOk5TQWNjZXNzaWJpbGl0eUVuaGFuY2VkVXNlcklu dGVyZmFjZUF0dHJpYnV0ZV0gYm9vbFZhbHVlXSk7CiAgICAgfQogICAgIAotICAgIGlmICghX3By aXZhdGUtPmNvcmVGcmFtZSB8fCAhX3ByaXZhdGUtPmNvcmVGcmFtZS0+ZG9jdW1lbnQoKSkKKyAg ICBpZiAoIV9wcml2YXRlLT5jb3JlRnJhbWUpCiAgICAgICAgIHJldHVybiBuaWw7CiAgICAgCi0g ICAgQWNjZXNzaWJpbGl0eU9iamVjdCogcm9vdE9iamVjdCA9IF9wcml2YXRlLT5jb3JlRnJhbWUt PmRvY3VtZW50KCktPmF4T2JqZWN0Q2FjaGUoKS0+cm9vdE9iamVjdEZvckZyYW1lKF9wcml2YXRl LT5jb3JlRnJhbWUpOworICAgIERvY3VtZW50KiBkb2N1bWVudCA9IF9wcml2YXRlLT5jb3JlRnJh bWUtPmRvY3VtZW50KCk7CisgICAgaWYgKCFkb2N1bWVudCB8fCAhZG9jdW1lbnQtPmF4T2JqZWN0 Q2FjaGUoKSkKKyAgICAgICAgcmV0dXJuIG5pbDsKKyAgICAKKyAgICBBY2Nlc3NpYmlsaXR5T2Jq ZWN0KiByb290T2JqZWN0ID0gZG9jdW1lbnQtPmF4T2JqZWN0Q2FjaGUoKS0+cm9vdE9iamVjdEZv ckZyYW1lKF9wcml2YXRlLT5jb3JlRnJhbWUpOwogICAgIGlmICghcm9vdE9iamVjdCkKICAgICAg ICAgcmV0dXJuIG5pbDsKICAgICAK