131719 2014-04-15 17:54:20 -0700 AX: Accessing a table cell with an invalid column header crashes 2014-04-16 11:05:17 -0700 1 1 1 Unclassified WebKit Accessibility 528+ (Nightly build) All All RESOLVED FIXED InRadar P2 Normal --- 1 cfleizach cfleizach aboxhall apinheiro commit-queue dmazzoni jcraig jdiggs mario samuel_white webkit-bug-importer oldest_to_newest 1001057 0 cfleizach 2014-04-15 17:54:20 -0700 * thread #1: tid = 0x95b3a, 0x0000000113f5dd75 WebCore`WebCore::AccessibilityTableCell::columnHeaders(this=0x00007ff91a48cd60, headers=0x00007fff53bdb1c8) + 389 at AccessibilityTableCell.cpp:184, queue = 'com.apple.main-thread', stop reason = EXC_BAD_ACCESS (code=1, address=0x0) frame #0: 0x0000000113f5dd75 WebCore`WebCore::AccessibilityTableCell::columnHeaders(this=0x00007ff91a48cd60, headers=0x00007fff53bdb1c8) + 389 at AccessibilityTableCell.cpp:184 181 continue; 182 183 std::pair<unsigned, unsigned> childRowRange; -> 184 tableCell->rowIndexRange(childRowRange); 185 186 const AtomicString& scope = tableCell->getAttribute(scopeAttr); 187 if (scope == "col" || tableCell->isTableHeaderCell()) 1001058 1 webkit-bug-importer 2014-04-15 17:54:51 -0700 <rdar://problem/16628821> 1001087 2 229429 cfleizach 2014-04-15 21:40:35 -0700 Created attachment 229429 patch 1001228 3 229429 commit-queue 2014-04-16 11:05:11 -0700 Comment on attachment 229429 patch Clearing flags on attachment: 229429 Committed r167361: <http://trac.webkit.org/changeset/167361> 1001229 4 commit-queue 2014-04-16 11:05:17 -0700 All reviewed patches have been landed. Closing bug. 229429 2014-04-15 21:40:35 -0700 2014-04-16 11:05:10 -0700 patch patch text/plain 3988 cfleizach SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDE2NzMzOSkKKysrIFNvdXJjZS9XZWJDb3JlL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE4IEBACisyMDE0LTA0LTE1ICBDaHJpcyBG bGVpemFjaCAgPGNmbGVpemFjaEBhcHBsZS5jb20+CisKKyAgICAgICAgQVg6IEFjY2Vzc2luZyBh IHRhYmxlIGNlbGwgd2l0aCBhbiBpbnZhbGlkIGNvbHVtbiBoZWFkZXIgY3Jhc2hlcworICAgICAg ICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MTMxNzE5CisKKyAgICAg ICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgSWYgbm8gdGFibGVDZWxs IGlzIGF2YWlsYWJsZSBhcyBhIGNvbHVtbi9yb3cgaGVhZGVyLCB0aGVuIGRvIG5vdCBjb250aW51 ZSBwcm9jZXNzaW5nLgorCisgICAgICAgIFRlc3Q6IGFjY2Vzc2liaWxpdHkvdGFibGUtbWlzc2lu Zy1jb2x1bW4taGVhZGVyLWNyYXNoLmh0bWwKKworICAgICAgICAqIGFjY2Vzc2liaWxpdHkvQWNj ZXNzaWJpbGl0eVRhYmxlQ2VsbC5jcHA6CisgICAgICAgIChXZWJDb3JlOjpBY2Nlc3NpYmlsaXR5 VGFibGVDZWxsOjpjb2x1bW5IZWFkZXJzKToKKyAgICAgICAgKFdlYkNvcmU6OkFjY2Vzc2liaWxp dHlUYWJsZUNlbGw6OnJvd0hlYWRlcnMpOgorCiAyMDE0LTA0LTEwICBSb2dlciBGb25nICA8cm9n ZXJfZm9uZ0BhcHBsZS5jb20+CiAKICAgICAgICAgU25hcHNob3R0ZWQgcGx1Z2lucyBtYXkgbmVl ZCB0byBiZSByZXN0YXJ0ZWQgaWYgc3R5bGUgcHJvcGVydGllcyBhcmUgY2hhbmdlZCBhZnRlciBp bml0aWFsIGxvYWQgb2YgcGx1Z2luLgpJbmRleDogU291cmNlL1dlYkNvcmUvYWNjZXNzaWJpbGl0 eS9BY2Nlc3NpYmlsaXR5VGFibGVDZWxsLmNwcAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2ViQ29y ZS9hY2Nlc3NpYmlsaXR5L0FjY2Vzc2liaWxpdHlUYWJsZUNlbGwuY3BwCShyZXZpc2lvbiAxNjcy ODMpCisrKyBTb3VyY2UvV2ViQ29yZS9hY2Nlc3NpYmlsaXR5L0FjY2Vzc2liaWxpdHlUYWJsZUNl bGwuY3BwCSh3b3JraW5nIGNvcHkpCkBAIC0xNzcsNyArMTc3LDcgQEAKICAgICAKICAgICBmb3Ig KHVuc2lnbmVkIHJvdyA9IDA7IHJvdyA8IHJvd1JhbmdlLmZpcnN0OyByb3crKykgewogICAgICAg ICBBY2Nlc3NpYmlsaXR5VGFibGVDZWxsKiB0YWJsZUNlbGwgPSBwYXJlbnQtPmNlbGxGb3JDb2x1 bW5BbmRSb3coY29sUmFuZ2UuZmlyc3QsIHJvdyk7Ci0gICAgICAgIGlmICh0YWJsZUNlbGwgPT0g dGhpcyB8fCBoZWFkZXJzLmNvbnRhaW5zKHRhYmxlQ2VsbCkpCisgICAgICAgIGlmICghdGFibGVD ZWxsIHx8IHRhYmxlQ2VsbCA9PSB0aGlzIHx8IGhlYWRlcnMuY29udGFpbnModGFibGVDZWxsKSkK ICAgICAgICAgICAgIGNvbnRpbnVlOwogCiAgICAgICAgIHN0ZDo6cGFpcjx1bnNpZ25lZCwgdW5z aWduZWQ+IGNoaWxkUm93UmFuZ2U7CkBAIC0yMDUsNyArMjA1LDcgQEAKIAogICAgIGZvciAodW5z aWduZWQgY29sdW1uID0gMDsgY29sdW1uIDwgY29sUmFuZ2UuZmlyc3Q7IGNvbHVtbisrKSB7CiAg ICAgICAgIEFjY2Vzc2liaWxpdHlUYWJsZUNlbGwqIHRhYmxlQ2VsbCA9IHBhcmVudC0+Y2VsbEZv ckNvbHVtbkFuZFJvdyhjb2x1bW4sIHJvd1JhbmdlLmZpcnN0KTsKLSAgICAgICAgaWYgKHRhYmxl Q2VsbCA9PSB0aGlzIHx8IGhlYWRlcnMuY29udGFpbnModGFibGVDZWxsKSkKKyAgICAgICAgaWYg KCF0YWJsZUNlbGwgfHwgdGFibGVDZWxsID09IHRoaXMgfHwgaGVhZGVycy5jb250YWlucyh0YWJs ZUNlbGwpKQogICAgICAgICAgICAgY29udGludWU7CiAgICAgICAgIAogICAgICAgICBjb25zdCBB dG9taWNTdHJpbmcmIHNjb3BlID0gdGFibGVDZWxsLT5nZXRBdHRyaWJ1dGUoc2NvcGVBdHRyKTsK SW5kZXg6IExheW91dFRlc3RzL2FjY2Vzc2liaWxpdHkvdGFibGUtbWlzc2luZy1jb2x1bW4taGVh ZGVyLWNyYXNoLWV4cGVjdGVkLnR4dAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9hY2Nlc3Np YmlsaXR5L3RhYmxlLW1pc3NpbmctY29sdW1uLWhlYWRlci1jcmFzaC1leHBlY3RlZC50eHQJKHJl dmlzaW9uIDApCisrKyBMYXlvdXRUZXN0cy9hY2Nlc3NpYmlsaXR5L3RhYmxlLW1pc3NpbmctY29s dW1uLWhlYWRlci1jcmFzaC1leHBlY3RlZC50eHQJKHdvcmtpbmcgY29weSkKQEAgLTAsMCArMSwx MSBAQAorSG9tZQlIZWxwCUxvZ2luCisJVGlwIHVzIG9uIG5ld3MKK1RoaXMgdGVzdHMgdGhhdCBh Y2Nlc3NpbmcgaW52YWxpZCBjb2x1bW4gaGVhZGVycyBkb2VzIG5vdCBjcmFzaC4KKworT24gc3Vj Y2VzcywgeW91IHdpbGwgc2VlIGEgc2VyaWVzIG9mICJQQVNTIiBtZXNzYWdlcywgZm9sbG93ZWQg YnkgIlRFU1QgQ09NUExFVEUiLgorCisKK1BBU1Mgc3VjY2Vzc2Z1bGx5UGFyc2VkIGlzIHRydWUK KworVEVTVCBDT01QTEVURQorCkluZGV4OiBMYXlvdXRUZXN0cy9hY2Nlc3NpYmlsaXR5L3RhYmxl LW1pc3NpbmctY29sdW1uLWhlYWRlci1jcmFzaC5odG1sCj09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIExheW91dFRl c3RzL2FjY2Vzc2liaWxpdHkvdGFibGUtbWlzc2luZy1jb2x1bW4taGVhZGVyLWNyYXNoLmh0bWwJ KHJldmlzaW9uIDApCisrKyBMYXlvdXRUZXN0cy9hY2Nlc3NpYmlsaXR5L3RhYmxlLW1pc3Npbmct Y29sdW1uLWhlYWRlci1jcmFzaC5odG1sCSh3b3JraW5nIGNvcHkpCkBAIC0wLDAgKzEsMzcgQEAK KzwhRE9DVFlQRSBIVE1MIFBVQkxJQyAiLS8vSUVURi8vRFREIEhUTUwvL0VOIj4KKzxodG1sPgor PGhlYWQ+Cis8c2NyaXB0IHNyYz0iLi4vcmVzb3VyY2VzL2pzLXRlc3QtcHJlLmpzIj48L3Njcmlw dD4KKzwvaGVhZD4KKzxib2R5IGlkPSJib2R5Ij4KKworPHRhYmxlIGlkPSJ0YWJsZSIgYm9yZGVy PSIxIiBjZWxsc3BhY2luZz0iMSI+Cis8dGJvZHk+PHRyPjx0ZD48dGFibGUgYm9yZGVyPSIxIiB3 aWR0aD0iMTAwJSI+PHRib2R5PgorPHRyPjx0ZD48YSBocmVmPSIvIiBhY2Nlc3NrZXk9IjEiPkhv bWU8L2E+PC90ZD4KKzx0ZD48YSBocmVmPSIvIj5IZWxwPC9hPjwvdGQ+Cis8dGQ+PGEgaHJlZj0i LyI+TG9naW48L2E+PC90ZD48L3RyPjwvdGJvZHk+PC90YWJsZT4KKzwvdGQ+PC90cj48dHI+PHRk IGNvbHNwYW49IjQiPgorPGlucHV0IHR5cGU9InRleHQiPjwvdGQ+PHRkIGNvbHNwYW49IjIiPjxh IGhyZWY9Ii8iPlRpcCB1cyBvbiBuZXdzPC9hPjwvdGQ+Cis8L3RyPjwvdGJvZHk+PC90YWJsZT4K KworCis8cCBpZD0iZGVzY3JpcHRpb24iPjwvcD4KKzxkaXYgaWQ9ImNvbnNvbGUiPjwvZGl2Pgor Cis8c2NyaXB0PgorCisgICAgZGVzY3JpcHRpb24oIlRoaXMgdGVzdHMgdGhhdCBhY2Nlc3Npbmcg aW52YWxpZCBjb2x1bW4gaGVhZGVycyBkb2VzIG5vdCBjcmFzaC4iKTsKKworICAgIGlmICh3aW5k b3cuYWNjZXNzaWJpbGl0eUNvbnRyb2xsZXIpIHsKKyAgICAgICAgdmFyIHRhYmxlID0gYWNjZXNz aWJpbGl0eUNvbnRyb2xsZXIuYWNjZXNzaWJsZUVsZW1lbnRCeUlkKCJ0YWJsZSIpOworCisgICAg ICAgIHZhciBjZWxsID0gdGFibGUuY2hpbGRBdEluZGV4KDEpLmNoaWxkQXRJbmRleCgxKTsKKyAg ICAgICAgLy8gVGhpcyBzaG91bGQgbm90IGNyYXNoLgorICAgICAgICBjZWxsLmF0dHJpYnV0ZXNP ZkNvbHVtbkhlYWRlcnMoKTsKKyAgICB9CisKKzwvc2NyaXB0PgorCis8c2NyaXB0IHNyYz0iLi4v cmVzb3VyY2VzL2pzLXRlc3QtcG9zdC5qcyI+PC9zY3JpcHQ+Cis8L2JvZHk+Cis8L2h0bWw+Cg==