199061 2019-06-20 00:01:49 -0700 REGRESSION(r245912): Crash in TextIterator::range via visiblePositionForIndexUsingCharacterIterator 2019-07-04 01:58:20 -0700 1 1 1 Unclassified WebKit Accessibility WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED https://bugs.webkit.org/show_bug.cgi?id=199431 InRadar, Regression P2 Normal --- 1 rniwa rniwa agomez cfleizach jcraig webkit-bug-importer wenson_hsieh oldest_to_newest 1546454 0 rniwa 2019-06-20 00:01:49 -0700 e.g. Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 com.apple.WebCore 0x00007fff488112cd WebCore::TextIterator::range() const + 61 1 com.apple.WebCore 0x00007fff488110ec WebCore::CharacterIterator::range() const + 28 2 com.apple.WebCore 0x00007fff49a2cb6a WebCore::visiblePositionForIndexUsingCharacterIterator(WebCore::Node&, int) + 2090 3 com.apple.WebCore 0x00007fff4967a49e WebCore::AccessibilityRenderObject::visiblePositionForIndex(int) const + 174 4 com.apple.WebCore 0x00007fff49647d93 WebCore::AXObjectCache::characterOffsetForIndex(int, WebCore::AccessibilityObject const*) + 67 5 com.apple.WebCore 0x00007fff4966a11f WebCore::AccessibilityObject::rangeForPlainTextRange(WebCore::PlainTextRange const&) const + 191 <rdar://problem/51765259> 1546455 1 372543 rniwa 2019-06-20 00:07:54 -0700 Created attachment 372543 Fixes the bug 1546456 2 cfleizach 2019-06-20 00:12:29 -0700 (In reply to Ryosuke Niwa from comment #1) > Created attachment 372543 [details] > Fixes the bug Thanks for handling this Ryosuke. 1546662 3 rniwa 2019-06-20 14:42:52 -0700 Committed r246653: <https://trac.webkit.org/changeset/246653> 372543 2019-06-20 00:07:54 -0700 2019-06-20 14:29:55 -0700 Fixes the bug bug-199061-20190620000754.patch text/plain 1477 rniwa SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDI0NjYzMCkKKysrIFNvdXJjZS9XZWJDb3JlL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE3IEBACisyMDE5LTA2LTIwICBSeW9zdWtl IE5pd2EgIDxybml3YUB3ZWJraXQub3JnPgorCisgICAgICAgIFJFR1JFU1NJT04ocjI0NTkxMik6 IENyYXNoIGluIFRleHRJdGVyYXRvcjo6cmFuZ2UgdmlhIHZpc2libGVQb3NpdGlvbkZvckluZGV4 VXNpbmdDaGFyYWN0ZXJJdGVyYXRvcgorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9z aG93X2J1Zy5jZ2k/aWQ9MTk5MDYxCisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BT ISkuCisKKyAgICAgICAgQXZvaWQgY2FsbGluZyBDaGFyYWN0ZXJJdGVyYXRvcjo6cmFuZ2Ugd2hl biBpdCdzIGF0IHRoZSBlbmQuIE90aGVyd2lzZSwgd2UnZCBjcmFzaCB3aXRoIG51bGwgcG9pbnRl ciBkZXJlZmVyZW5jaW5nLgorCisgICAgICAgIFVuZm9ydHVuYXRlbHkgbm8gbmV3IHRlc3RzIHNp bmNlIHdlIGRvbid0IGhhdmUgYW55IHJlcHJvZHVjaWJsZSB0ZXN0IGNhc2UuCisKKyAgICAgICAg KiBlZGl0aW5nL0VkaXRpbmcuY3BwOgorICAgICAgICAoV2ViQ29yZTo6dmlzaWJsZVBvc2l0aW9u Rm9ySW5kZXhVc2luZ0NoYXJhY3Rlckl0ZXJhdG9yKToKKwogMjAxOS0wNi0xOSAgSnVzdGluIEZh biAgPGp1c3Rpbl9mYW5AYXBwbGUuY29tPgogCiAgICAgICAgIFtXSExTTF0gQ3JlYXRlIGEgc2hh ZGluZyBsYW5ndWFnZSB0ZXN0IGhhcm5lc3MKSW5kZXg6IFNvdXJjZS9XZWJDb3JlL2VkaXRpbmcv RWRpdGluZy5jcHAKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291cmNlL1dlYkNvcmUvZWRpdGluZy9FZGl0aW5n LmNwcAkocmV2aXNpb24gMjQ2NjMwKQorKysgU291cmNlL1dlYkNvcmUvZWRpdGluZy9FZGl0aW5n LmNwcAkod29ya2luZyBjb3B5KQpAQCAtMTEyNyw3ICsxMTI3LDggQEAgVmlzaWJsZVBvc2l0aW9u IHZpc2libGVQb3NpdGlvbkZvckluZGV4VQogICAgICAgICBhdXRvIHJhbmdlID0gaXQucmFuZ2Uo KTsKICAgICAgICAgaWYgKHJhbmdlLT5zdGFydFBvc2l0aW9uKCkgPT0gcmFuZ2UtPmVuZFBvc2l0 aW9uKCkpIHsKICAgICAgICAgICAgIGl0LmFkdmFuY2UoMSk7Ci0gICAgICAgICAgICByZXR1cm4g VmlzaWJsZVBvc2l0aW9uKGl0LnJhbmdlKCktPnN0YXJ0UG9zaXRpb24oKSk7CisgICAgICAgICAg ICBpZiAoIWl0LmF0RW5kKCkpCisgICAgICAgICAgICAgICAgcmV0dXJuIFZpc2libGVQb3NpdGlv bihpdC5yYW5nZSgpLT5zdGFydFBvc2l0aW9uKCkpOwogICAgICAgICB9CiAgICAgfQogCg==