155943 2016-03-28 00:17:13 -0700 AX: Crash when AX trying to create element for an old auto fill element 2016-03-28 17:58:25 -0700 1 1 1 Unclassified WebKit Accessibility Safari 9 All All RESOLVED FIXED InRadar P2 Normal --- 1 cfleizach cfleizach aboxhall apinheiro commit-queue dmazzoni jcraig jdiggs mario samuel_white webkit-bug-importer oldest_to_newest 1178394 0 cfleizach 2016-03-28 00:17:13 -0700 AX code can access an auto fill element that is still there as a Node, but has no renderer, and then add it to its child list as an empty refPtr Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 com.apple.WebCore 0x00007fff9d11a403 WebCore::AccessibilityRenderObject::addChildren() + 355 1 com.apple.WebCore 0x00007fff9d108c52 WebCore::AccessibilityObject::updateChildrenIfNecessary() + 66 2 com.apple.WebCore 0x00007fff9d10460d WebCore::AccessibilityObject::updateBackingStore() + 77 3 com.apple.WebCore 0x00007fff9dea6dfd -[WebAccessibilityObjectWrapperBase updateObjectBackingStore] + 61 4 com.apple.WebCore 0x00007fff9deb6ff7 -[WebAccessibilityObjectWrapper accessibilityIsIgnored] + 23 5 com.apple.AppKit 0x00007fff93d5adbe NSAccessibilityEntryPointIsAccessibilityElement + 231 6 com.apple.AppKit 0x00007fff93dc5101 NSAccessibilityPostNotificationForObservedElementWithUserInfo + 215 7 com.apple.WebCore 0x00007fff9d18ee7f WebCore::AXObjectCache::postPlatformNotification(WebCore::AccessibilityObject*, <rdar://problem/25350155> 1178396 1 275018 cfleizach 2016-03-28 00:45:25 -0700 Created attachment 275018 patch 1178590 2 275018 commit-queue 2016-03-28 17:58:22 -0700 Comment on attachment 275018 patch Clearing flags on attachment: 275018 Committed r198769: <http://trac.webkit.org/changeset/198769> 1178591 3 commit-queue 2016-03-28 17:58:25 -0700 All reviewed patches have been landed. Closing bug. 275018 2016-03-28 00:45:25 -0700 2016-03-28 17:58:22 -0700 patch patch text/plain 4603 cfleizach SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDE5ODcyOSkKKysrIFNvdXJjZS9XZWJDb3JlL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE4IEBACisyMDE2LTAzLTI4ICBDaHJpcyBG bGVpemFjaCAgPGNmbGVpemFjaEBhcHBsZS5jb20+CisKKyAgICAgICAgQVg6IENyYXNoIHdoZW4g QVggdHJ5aW5nIHRvIGNyZWF0ZSBlbGVtZW50IGZvciBhbiBvbGQgYXV0byBmaWxsIGVsZW1lbnQK KyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTE1NTk0Mwor CisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIFdoZW4gYW4g YXV0by1maWxsIGVsZW1lbnQgaXMgcmVtb3ZlZCwgdGhlIE5vZGUgaGFuZ3MgYXJvdW5kIGJ1dCB0 aGUgcmVuZGVyZXIgaXMgZ29uZS4KKyAgICAgICAgSW4gdGhvc2UgY2FzZXMsIHdlIGNhbid0IGJs aW5kbHkgYWRkIHRoZSByZXN1bHQgb2YgZ2V0T3JDcmVhdGUgdG8gdGhlIGNoaWxkcmVuIGFycmF5 LgorCisgICAgICAgIFRlc3Q6IGFjY2Vzc2liaWxpdHkvYXV0by1maWxsLWNyYXNoLmh0bWwKKwor ICAgICAgICAqIGFjY2Vzc2liaWxpdHkvQWNjZXNzaWJpbGl0eVJlbmRlck9iamVjdC5jcHA6Cisg ICAgICAgIChXZWJDb3JlOjpBY2Nlc3NpYmlsaXR5UmVuZGVyT2JqZWN0OjphZGRUZXh0RmllbGRD aGlsZHJlbik6CisKIDIwMTYtMDMtMjcgIEtvbnN0YW50aW4gVG9rYXJldiAgPGFubnVsZW5AeWFu ZGV4LnJ1PgogCiAgICAgICAgIFJlbW92ZWQgcmVkdW5kYW50ICNpZiBjb25kaXRpb25zIGluIEFO R0xFV2ViS2l0QnJpZGdlLmgKSW5kZXg6IFNvdXJjZS9XZWJDb3JlL2FjY2Vzc2liaWxpdHkvQWNj ZXNzaWJpbGl0eVJlbmRlck9iamVjdC5jcHAKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291cmNlL1dlYkNvcmUv YWNjZXNzaWJpbGl0eS9BY2Nlc3NpYmlsaXR5UmVuZGVyT2JqZWN0LmNwcAkocmV2aXNpb24gMTk4 NDkwKQorKysgU291cmNlL1dlYkNvcmUvYWNjZXNzaWJpbGl0eS9BY2Nlc3NpYmlsaXR5UmVuZGVy T2JqZWN0LmNwcAkod29ya2luZyBjb3B5KQpAQCAtMjk0Niw4ICsyOTM1LDEwIEBACiAgICAgICAg IHJldHVybjsKICAgICAKICAgICBIVE1MSW5wdXRFbGVtZW50JiBpbnB1dCA9IGRvd25jYXN0PEhU TUxJbnB1dEVsZW1lbnQ+KCpub2RlKTsKLSAgICBpZiAoSFRNTEVsZW1lbnQqIGF1dG9GaWxsRWxl bWVudCA9IGlucHV0LmF1dG9GaWxsQnV0dG9uRWxlbWVudCgpKQotICAgICAgICBtX2NoaWxkcmVu LmFwcGVuZChheE9iamVjdENhY2hlKCktPmdldE9yQ3JlYXRlKGF1dG9GaWxsRWxlbWVudCkpOwor ICAgIGlmIChIVE1MRWxlbWVudCogYXV0b0ZpbGxFbGVtZW50ID0gaW5wdXQuYXV0b0ZpbGxCdXR0 b25FbGVtZW50KCkpIHsKKyAgICAgICAgaWYgKEFjY2Vzc2liaWxpdHlPYmplY3QqIGF4QXV0b0Zp bGwgPSBheE9iamVjdENhY2hlKCktPmdldE9yQ3JlYXRlKGF1dG9GaWxsRWxlbWVudCkpCisgICAg ICAgICAgICBtX2NoaWxkcmVuLmFwcGVuZChheEF1dG9GaWxsKTsKKyAgICB9CiAgICAgCiAgICAg SFRNTEVsZW1lbnQqIHNwaW5CdXR0b25FbGVtZW50ID0gaW5wdXQuaW5uZXJTcGluQnV0dG9uRWxl bWVudCgpOwogICAgIGlmICghaXM8U3BpbkJ1dHRvbkVsZW1lbnQ+KHNwaW5CdXR0b25FbGVtZW50 KSkKSW5kZXg6IExheW91dFRlc3RzL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0 cy9DaGFuZ2VMb2cJKHJldmlzaW9uIDE5ODcyOSkKKysrIExheW91dFRlc3RzL0NoYW5nZUxvZwko d29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDEzIEBACisyMDE2LTAzLTI4ICBDaHJpcyBGbGVpemFj aCAgPGNmbGVpemFjaEBhcHBsZS5jb20+CisKKyAgICAgICAgQVg6IENyYXNoIHdoZW4gQVggdHJ5 aW5nIHRvIGNyZWF0ZSBlbGVtZW50IGZvciBhbiBvbGQgYXV0byBmaWxsIGVsZW1lbnQKKyAgICAg ICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTE1NTk0MworCisgICAg ICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgICogYWNjZXNzaWJpbGl0 eS9hdXRvLWZpbGwtY3Jhc2gtZXhwZWN0ZWQudHh0OiBBZGRlZC4KKyAgICAgICAgKiBhY2Nlc3Np YmlsaXR5L2F1dG8tZmlsbC1jcmFzaC5odG1sOiBBZGRlZC4KKwogMjAxNi0wMy0yNyAgSHVuc2Vv cCBKZW9uZyAgPGhzODUuamVvbmdAc2Ftc3VuZy5jb20+CiAKICAgICAgICAgW0VGTF0gUkVHUkVT U0lPTihyMTg4NzkzKTogSXQgbWFkZSAyMDAgbGF5b3V0IHRlc3RzIGFuZCBCaW5kaW5ncy9ldmVu dC10YXJnZXQtd3JhcHBlci5odG1sIHBlcmZvcm1hbmNlIHRlc3QgZmFpbApJbmRleDogTGF5b3V0 VGVzdHMvYWNjZXNzaWJpbGl0eS9hdXRvLWZpbGwtY3Jhc2gtZXhwZWN0ZWQudHh0Cj09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT0KLS0tIExheW91dFRlc3RzL2FjY2Vzc2liaWxpdHkvYXV0by1maWxsLWNyYXNoLWV4cGVjdGVk LnR4dAkocmV2aXNpb24gMCkKKysrIExheW91dFRlc3RzL2FjY2Vzc2liaWxpdHkvYXV0by1maWxs LWNyYXNoLWV4cGVjdGVkLnR4dAkod29ya2luZyBjb3B5KQpAQCAtMCwwICsxLDEyIEBACisKK1Ro aXMgdGVzdHMgdGhhdCB3aGVuIGFuIGF1dG8gZmlsbCBlbGVtZW50IGlzIHJlbW92ZWQgd2Ugd29u J3QgY3Jhc2ggYWNjZXNzaW5nIGFuIG9sZCB2YWx1ZS4KKworT24gc3VjY2VzcywgeW91IHdpbGwg c2VlIGEgc2VyaWVzIG9mICJQQVNTIiBtZXNzYWdlcywgZm9sbG93ZWQgYnkgIlRFU1QgQ09NUExF VEUiLgorCisKK1BBU1MgYWNjZXNzaWJpbGl0eUNvbnRyb2xsZXIuYWNjZXNzaWJsZUVsZW1lbnRC eUlkKCd0ZXh0ZmllbGQnKS5jaGlsZHJlbkNvdW50IGlzIDMKK1BBU1MgYWNjZXNzaWJpbGl0eUNv bnRyb2xsZXIuYWNjZXNzaWJsZUVsZW1lbnRCeUlkKCd0ZXh0ZmllbGQnKS5jaGlsZHJlbkNvdW50 IGlzIDEKK1BBU1Mgc3VjY2Vzc2Z1bGx5UGFyc2VkIGlzIHRydWUKKworVEVTVCBDT01QTEVURQor CkluZGV4OiBMYXlvdXRUZXN0cy9hY2Nlc3NpYmlsaXR5L2F1dG8tZmlsbC1jcmFzaC5odG1sCj09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT0KLS0tIExheW91dFRlc3RzL2FjY2Vzc2liaWxpdHkvYXV0by1maWxsLWNyYXNoLmh0 bWwJKHJldmlzaW9uIDApCisrKyBMYXlvdXRUZXN0cy9hY2Nlc3NpYmlsaXR5L2F1dG8tZmlsbC1j cmFzaC5odG1sCSh3b3JraW5nIGNvcHkpCkBAIC0wLDAgKzEsMzIgQEAKKzwhRE9DVFlQRSBIVE1M IFBVQkxJQyAiLS8vSUVURi8vRFREIEhUTUwvL0VOIj4KKzxodG1sPgorPGhlYWQ+Cis8bWV0YSBj aGFyc2V0PSJ1dGYtOCI+Cis8c2NyaXB0IHNyYz0iLi4vcmVzb3VyY2VzL2pzLXRlc3QtcHJlLmpz Ij48L3NjcmlwdD4KKzwvaGVhZD4KKzxib2R5IGlkPSJib2R5Ij4KKworPGlucHV0IHR5cGU9InRl eHQiIHZhbHVlPSJoZWxsbyIgaWQ9InRleHRmaWVsZCI+CisKKzxwIGlkPSJkZXNjcmlwdGlvbiI+ PC9wPgorPGRpdiBpZD0iY29uc29sZSI+PC9kaXY+CisKKzxzY3JpcHQ+CisKKyAgICBkZXNjcmlw dGlvbigiVGhpcyB0ZXN0cyB0aGF0IHdoZW4gYW4gYXV0byBmaWxsIGVsZW1lbnQgaXMgcmVtb3Zl ZCB3ZSB3b24ndCBjcmFzaCBhY2Nlc3NpbmcgYW4gb2xkIHZhbHVlLiIpOworCisgICAgaWYgKHdp bmRvdy5hY2Nlc3NpYmlsaXR5Q29udHJvbGxlcikgeworICAgICAgICB2YXIgYXhUZXh0RmllbGQg PSBhY2Nlc3NpYmlsaXR5Q29udHJvbGxlci5hY2Nlc3NpYmxlRWxlbWVudEJ5SWQoInRleHRmaWVs ZCIpOworICAgICAgICB3aW5kb3cuaW50ZXJuYWxzLnNldFNob3dBdXRvRmlsbEJ1dHRvbihkb2N1 bWVudC5nZXRFbGVtZW50QnlJZCgidGV4dGZpZWxkIiksICJBdXRvRmlsbEJ1dHRvblR5cGVDb250 YWN0cyIpOworICAgICAgICBzaG91bGRCZSgiYWNjZXNzaWJpbGl0eUNvbnRyb2xsZXIuYWNjZXNz aWJsZUVsZW1lbnRCeUlkKCd0ZXh0ZmllbGQnKS5jaGlsZHJlbkNvdW50IiwgIjMiKTsKKworICAg ICAgICAvLyBEb24ndCBjcmFzaCEKKyAgICAgICAgd2luZG93LmludGVybmFscy5zZXRTaG93QXV0 b0ZpbGxCdXR0b24oZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoInRleHRmaWVsZCIpLCAiQXV0b0Zp bGxCdXR0b25UeXBlTm9uZSIpOworICAgICAgICBzaG91bGRCZSgiYWNjZXNzaWJpbGl0eUNvbnRy b2xsZXIuYWNjZXNzaWJsZUVsZW1lbnRCeUlkKCd0ZXh0ZmllbGQnKS5jaGlsZHJlbkNvdW50Iiwg IjEiKTsKKyAgICB9CisKKzwvc2NyaXB0PgorCis8c2NyaXB0IHNyYz0iLi4vcmVzb3VyY2VzL2pz LXRlc3QtcG9zdC5qcyI+PC9zY3JpcHQ+Cis8L2JvZHk+Cis8L2h0bWw+Cg==