<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>171247</bug_id>
          
          <creation_ts>2017-04-24 13:41:23 -0700</creation_ts>
          <short_desc>AX: Crash at WebCore::AXObjectCache::characterOffsetForIndex(int, WebCore::AccessibilityObject const*) + 703</short_desc>
          <delta_ts>2017-04-24 17:05:25 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Accessibility</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Nan Wang">n_wang</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>aboxhall</cc>
    
    <cc>apinheiro</cc>
    
    <cc>buildbot</cc>
    
    <cc>cfleizach</cc>
    
    <cc>commit-queue</cc>
    
    <cc>dmazzoni</cc>
    
    <cc>jcraig</cc>
    
    <cc>jdiggs</cc>
    
    <cc>n_wang</cc>
    
    <cc>samuel_white</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1300642</commentid>
    <comment_count>0</comment_count>
    <who name="Nan Wang">n_wang</who>
    <bug_when>2017-04-24 13:41:23 -0700</bug_when>
    <thetext>Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebCore             	0x00007fffa0bc4a5f WebCore::AXObjectCache::characterOffsetForIndex(int, WebCore::AccessibilityObject const*) + 703
1   com.apple.WebCore             	0x00007fffa1b7f8c3 -[WebAccessibilityObjectWrapper accessibilityAttributeValue:forParameter:] + 6099
2   com.apple.AppKit              	0x00007fff9160fe53 ___NSAccessibilityEntryPointValueForAttributeWithParameter_block_invoke.842 + 476
3   com.apple.AppKit              	0x00007fff9160ae65 NSAccessibilityPerformEntryPointObject + 16
4   com.apple.AppKit              	0x00007fff9160c474 NSAccessibilityEntryPointValueForAttributeWithParameter + 189
5   com.apple.AppKit              	0x00007fff913cdbcf CopyParameterizedAttributeValue + 540
6   com.apple.HIServices          	0x00007fff9229186d _AXXMIGCopyParameterizedAttributeValue + 327
7   com.apple.HIServices          	0x00007fff9229caf7 _XCopyParameterizedAttributeValue + 636
8   com.apple.HIServices          	0x00007fff92274dd9 mshMIGPerform + 212

&lt;rdar://problem/31664234&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1300643</commentid>
    <comment_count>1</comment_count>
      <attachid>308003</attachid>
    <who name="Nan Wang">n_wang</who>
    <bug_when>2017-04-24 13:46:44 -0700</bug_when>
    <thetext>Created attachment 308003
patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1300733</commentid>
    <comment_count>2</comment_count>
      <attachid>308003</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2017-04-24 17:05:24 -0700</bug_when>
    <thetext>Comment on attachment 308003
patch

Clearing flags on attachment: 308003

Committed r215705: &lt;http://trac.webkit.org/changeset/215705&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1300734</commentid>
    <comment_count>3</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2017-04-24 17:05:25 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>308003</attachid>
            <date>2017-04-24 13:46:44 -0700</date>
            <delta_ts>2017-04-24 17:05:24 -0700</delta_ts>
            <desc>patch</desc>
            <filename>patch.txt</filename>
            <type>text/plain</type>
            <size>4208</size>
            <attacher name="Nan Wang">n_wang</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09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=
</data>

          </attachment>
      

    </bug>

</bugzilla>