<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>194630</bug_id>
          
          <creation_ts>2019-02-13 17:44:53 -0800</creation_ts>
          <short_desc>REGRESSION(r241289): [GTK] accessibility/removed-continuation-element-causes-crash.html and accessibility/removed-anonymous-block-child-causes-crash.html crashes</short_desc>
          <delta_ts>2019-04-22 00:58:17 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebKitGTK</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Alicia Boya García">aboya</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>aboxhall</cc>
    
    <cc>apinheiro</cc>
    
    <cc>bugs-noreply</cc>
    
    <cc>cfleizach</cc>
    
    <cc>cgarcia</cc>
    
    <cc>dmazzoni</cc>
    
    <cc>ews-watchlist</cc>
    
    <cc>jcraig</cc>
    
    <cc>jdiggs</cc>
    
    <cc>mcatanzaro</cc>
    
    <cc>samuel_white</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1505981</commentid>
    <comment_count>0</comment_count>
    <who name="Alicia Boya García">aboya</who>
    <bug_when>2019-02-13 17:44:53 -0800</bug_when>
    <thetext>The following layout tests are crashing on GTK

accessibility/removed-anonymous-block-child-causes-crash.html

atk_object_set_parent: assertion &apos;ATK_IS_OBJECT (accessible)&apos; failed
LEAK: 1 WebPageProxy

Thread 1 (Thread 0x7f0d3f10cac0 (LWP 28267)):
#0  _g_log_abort () at ../../Source/glib-2.58.1/glib/gmessages.c:557
#1  0x00007f0d46a46485 in g_logv () at ../../Source/glib-2.58.1/glib/gmessages.c:1371
#2  0x00007f0d46a465d2 in g_log () at ../../Source/glib-2.58.1/glib/gmessages.c:1413
#3  0x00007f0d59fb2427 in webkitAccessibleRefChild (object=0x55afd30c0740, index=2) at ../../Source/WebCore/accessibility/atk/WebKitAccessibleWrapperAtk.cpp:389
#4  0x00007f0cf4965e5e in WTR::AccessibilityUIElement::getChildrenWithRange (this=0x7f0cc8d76da0, children=WTF::Vector of length 0, capacity 0, location=2, length=1) at /home/slave/webkitgtk/gtk-linux-64-debug/build/Tools/WebKitTestRunner/InjectedBundle/atk/AccessibilityUIElementAtk.cpp:801
#5  0x00007f0cf496630c in WTR::AccessibilityUIElement::childAtIndex (this=0x7f0cc8d76da0, index=2) at /home/slave/webkitgtk/gtk-linux-64-debug/build/Tools/WebKitTestRunner/InjectedBundle/atk/AccessibilityUIElementAtk.cpp:845
#6  0x00007f0cf4948206 in WTR::JSAccessibilityUIElement::childAtIndex (context=0x7fff037e8c20, thisObject=0x7f0cf40feb80, argumentCount=1, arguments=0x7fff037e8ad0, exception=0x7fff037e8ab8) at /home/slave/webkitgtk/gtk-linux-64-debug/build/WebKitBuild/Debug/DerivedSources/InjectedBundle/JSAccessibilityUIElement.cpp:311
#7  0x00007f0d4c8bc01a in JSC::APICallbackFunction::call&lt;JSC::JSCallbackFunction&gt; (exec=0x7fff037e8c20) at ../../Source/JavaScriptCore/API/APICallbackFunction.h:63
#8  0x00007f0cf70a302d in ?? ()
#9  0x00007fff037e8cd0 in ?? ()
#10 0x00007f0d4d5c08d1 in llint_op_call () at ../../Source/WTF/wtf/Ref.h:119
#11 0x0000000000000000 in ?? ()

accessibility/removed-continuation-element-causes-crash.html

atk_object_set_parent: assertion &apos;ATK_IS_OBJECT (accessible)&apos; failed
LEAK: 1 WebPageProxy

Thread 1 (Thread 0x7f83a3cb9ac0 (LWP 31484)):
#0  _g_log_abort () at ../../Source/glib-2.58.1/glib/gmessages.c:557
#1  0x00007f83ab5f3485 in g_logv () at ../../Source/glib-2.58.1/glib/gmessages.c:1371
#2  0x00007f83ab5f35d2 in g_log () at ../../Source/glib-2.58.1/glib/gmessages.c:1413
#3  0x00007f83beb5f427 in webkitAccessibleRefChild (object=0x559b17ad6120, index=0) at ../../Source/WebCore/accessibility/atk/WebKitAccessibleWrapperAtk.cpp:389
#4  0x00007f8359565cf4 in WTR::AccessibilityUIElement::getChildren (this=0x7f83408bcb60, children=WTF::Vector of length 0, capacity 0) at /home/slave/webkitgtk/gtk-linux-64-debug/build/Tools/WebKitTestRunner/InjectedBundle/atk/AccessibilityUIElementAtk.cpp:790
#5  0x00007f83595671c0 in WTR::AccessibilityUIElement::attributesOfChildren (this=0x7f83408bcb60) at /home/slave/webkitgtk/gtk-linux-64-debug/build/Tools/WebKitTestRunner/InjectedBundle/atk/AccessibilityUIElementAtk.cpp:1066
#6  0x00007f8359549715 in WTR::JSAccessibilityUIElement::attributesOfChildren (context=0x7ffc0441a4b0, thisObject=0x7f83584fc210, argumentCount=0, arguments=0x7ffc0441a360, exception=0x7ffc0441a348) at /home/slave/webkitgtk/gtk-linux-64-debug/build/WebKitBuild/Debug/DerivedSources/InjectedBundle/JSAccessibilityUIElement.cpp:642
#7  0x00007f83b146901a in JSC::APICallbackFunction::call&lt;JSC::JSCallbackFunction&gt; (exec=0x7ffc0441a4b0) at ../../Source/JavaScriptCore/API/APICallbackFunction.h:63
#8  0x00007f835bca302d in ?? ()
#9  0x00007ffc0441a520 in ?? ()
#10 0x00007f83b216d95b in llint_op_call () at ../../Source/WTF/wtf/Ref.h:119
#11 0x0000000000000000 in ?? ()</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1526717</commentid>
    <comment_count>1</comment_count>
      <attachid>367316</attachid>
    <who name="Carlos Garcia Campos">cgarcia</who>
    <bug_when>2019-04-12 05:42:06 -0700</bug_when>
    <thetext>Created attachment 367316
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1529194</commentid>
    <comment_count>2</comment_count>
    <who name="Carlos Garcia Campos">cgarcia</who>
    <bug_when>2019-04-22 00:58:17 -0700</bug_when>
    <thetext>Committed r244498: &lt;https://trac.webkit.org/changeset/244498&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>367316</attachid>
            <date>2019-04-12 05:42:06 -0700</date>
            <delta_ts>2019-04-12 10:36:45 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>wcore-atk-crashes.diff</filename>
            <type>text/plain</type>
            <size>4887</size>
            <attacher name="Carlos Garcia Campos">cgarcia</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL0NoYW5nZUxvZyBiL0xheW91dFRlc3RzL0NoYW5nZUxv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</data>
<flag name="review"
          id="383668"
          type_id="1"
          status="+"
          setter="mcatanzaro"
    />
          </attachment>
      

    </bug>

</bugzilla>