<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>157256</bug_id>
          
          <creation_ts>2016-05-01 19:50:42 -0700</creation_ts>
          <short_desc>AX: Crash at  WebCore::AccessibilityObject::getAttribute const + 9</short_desc>
          <delta_ts>2016-05-01 23:14:06 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Accessibility</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Nan Wang">n_wang</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>aboxhall</cc>
    
    <cc>apinheiro</cc>
    
    <cc>cfleizach</cc>
    
    <cc>commit-queue</cc>
    
    <cc>dmazzoni</cc>
    
    <cc>jcraig</cc>
    
    <cc>jdiggs</cc>
    
    <cc>mario</cc>
    
    <cc>n_wang</cc>
    
    <cc>samuel_white</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1189307</commentid>
    <comment_count>0</comment_count>
    <who name="Nan Wang">n_wang</who>
    <bug_when>2016-05-01 19:50:42 -0700</bug_when>
    <thetext>&gt;  1 com.apple.WebCore              0x002c7459 WebCore::AccessibilityObject::getAttribute(WebCore::QualifiedName const&amp;) const + 9
   2 com.apple.WebCore              0x002c061c WebCore::AccessibilityNodeObject::titleElementText(WTF::Vector&lt;WebCore::AccessibilityText, 0ul, WTF::CrashOnOverflow, 16ul&gt;&amp;) const + 188
   3 com.apple.WebCore              0x002c29ac WebCore::AccessibilityNodeObject::accessibilityText(WTF::Vector&lt;WebCore::AccessibilityText, 0ul, WTF::CrashOnOverflow, 16ul&gt;&amp;) + 28
   4 com.apple.WebCore              0x010e634d -[WebAccessibilityObjectWrapperBase baseAccessibilityDescription] + 93
   5 com.apple.WebCore              0x010f0545 -[WebAccessibilityObjectWrapper accessibilityAttributeValue:] + 245</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1189308</commentid>
    <comment_count>1</comment_count>
    <who name="Nan Wang">n_wang</who>
    <bug_when>2016-05-01 19:51:37 -0700</bug_when>
    <thetext>&lt;rdar://problem/26032981&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1189309</commentid>
    <comment_count>2</comment_count>
      <attachid>277886</attachid>
    <who name="Nan Wang">n_wang</who>
    <bug_when>2016-05-01 20:02:09 -0700</bug_when>
    <thetext>Created attachment 277886
Initial patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1189325</commentid>
    <comment_count>3</comment_count>
      <attachid>277886</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2016-05-01 23:14:02 -0700</bug_when>
    <thetext>Comment on attachment 277886
Initial patch

Clearing flags on attachment: 277886

Committed r200318: &lt;http://trac.webkit.org/changeset/200318&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1189326</commentid>
    <comment_count>4</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2016-05-01 23:14:06 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>277886</attachid>
            <date>2016-05-01 20:02:09 -0700</date>
            <delta_ts>2016-05-01 23:14:02 -0700</delta_ts>
            <desc>Initial patch</desc>
            <filename>patch.txt</filename>
            <type>text/plain</type>
            <size>4448</size>
            <attacher name="Nan Wang">n_wang</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09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</data>

          </attachment>
      

    </bug>

</bugzilla>