<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>269319</bug_id>
          
          <creation_ts>2024-02-13 13:47:46 -0800</creation_ts>
          <short_desc>AX: com.apple.WebKit.WebContent crash at WebCore: -[WebAccessibilityObjectWrapper handleNotificationRelayToChrome:notificationData:]</short_desc>
          <delta_ts>2024-02-14 00:14:08 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Accessibility</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="chris fleizach">cfleizach</reporter>
          <assigned_to name="chris fleizach">cfleizach</assigned_to>
          <cc>aboxhall</cc>
    
    <cc>andresg_22</cc>
    
    <cc>apinheiro</cc>
    
    <cc>dmazzoni</cc>
    
    <cc>ews-watchlist</cc>
    
    <cc>jcraig</cc>
    
    <cc>samuel_white</cc>
    
    <cc>tyler_w</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>2013285</commentid>
    <comment_count>0</comment_count>
    <who name="chris fleizach">cfleizach</who>
    <bug_when>2024-02-13 13:47:46 -0800</bug_when>
    <thetext>Exception Type:  EXC_BAD_ACCESS (SIGSEGV)
Exception Subtype: KERN_INVALID_ADDRESS at 0x0000000000000018
Exception Codes: 0x0000000000000001, 0x0000000000000018


Thread 0 Crashed::   Dispatch queue: com.apple.main-thread
0   WebCore                       	       0x19f83e3d0 WTF::RawPtrTraits&lt;WebCore::WeakPtrImplWithEventTargetData&gt;::unwrap(WebCore::WeakPtrImplWithEventTargetData* const&amp;) + 0 (/AppleInternal/Library/BuildRoots/b6047cd8-c4d9-11ee-9e3f-1e1d6dc629d0/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS17.4.Internal.sdk/usr/local/include/wtf/RawPtrTraits.h:44) [inlined]
1   WebCore                       	       0x19f83e3d0 WTF::Ref&lt;WebCore::WeakPtrImplWithEventTargetData, WTF::RawPtrTraits&lt;WebCore::WeakPtrImplWithEventTargetData&gt;&gt;::operator-&gt;() const + 0 (/AppleInternal/Library/BuildRoots/b6047cd8-c4d9-11ee-9e3f-1e1d6dc629d0/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS17.4.Internal.sdk/usr/local/include/wtf/Ref.h:115) [inlined]
2   WebCore                       	       0x19f83e3d0 WTF::WeakRef&lt;WebCore::Document, WebCore::WeakPtrImplWithEventTargetData&gt;::get() const + 0 (/AppleInternal/Library/BuildRoots/b6047cd8-c4d9-11ee-9e3f-1e1d6dc629d0/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS17.4.Internal.sdk/usr/local/include/wtf/WeakRef.h:86) [inlined]
3   WebCore                       	       0x19f83e3d0 WebCore::AXObjectCache::document() const + 0 (/Library/Caches/com.apple.xbs/Sources/WebCore/Source/WebCore/accessibility/AXObjectCache.h:465) [inlined]
4   WebCore                       	       0x19f83e3d0 WebCore::AXObjectCache::relayNotification(WTF::String const&amp;, WTF::RetainPtr&lt;NSData&gt;) + 0 (/Library/Caches/com.apple.xbs/Sources/WebCore/Source/WebCore/accessibility/ios/AXObjectCacheIOS.mm:98) [inlined]
5   WebCore                       	       0x19f83e3d0 -[WebAccessibilityObjectWrapper handleNotificationRelayToChrome:notificationData:] + 128 (/Library/Caches/com.apple.xbs/Sources/WebCore/Source/WebCore/accessibility/ios/WebAccessibilityObjectWrapperIOS.mm:1714)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2013286</commentid>
    <comment_count>1</comment_count>
    <who name="chris fleizach">cfleizach</who>
    <bug_when>2024-02-13 13:48:00 -0800</bug_when>
    <thetext>&lt;rdar://problem/122688370&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2013293</commentid>
    <comment_count>2</comment_count>
      <attachid>469854</attachid>
    <who name="chris fleizach">cfleizach</who>
    <bug_when>2024-02-13 14:12:27 -0800</bug_when>
    <thetext>Created attachment 469854
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2013297</commentid>
    <comment_count>3</comment_count>
      <attachid>469855</attachid>
    <who name="chris fleizach">cfleizach</who>
    <bug_when>2024-02-13 14:19:52 -0800</bug_when>
    <thetext>Created attachment 469855
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2013438</commentid>
    <comment_count>4</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2024-02-14 00:14:06 -0800</bug_when>
    <thetext>Committed 274610@main (46a7bd3624b4): &lt;https://commits.webkit.org/274610@main&gt;

All reviewed patches have been landed. Closing bug and clearing flags on attachment 469855.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>469854</attachid>
            <date>2024-02-13 14:12:27 -0800</date>
            <delta_ts>2024-02-13 14:19:50 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-269319-20240213141226.patch</filename>
            <type>text/plain</type>
            <size>1384</size>
            <attacher name="chris fleizach">cfleizach</attacher>
            
              <data encoding="base64">RnJvbSA1Y2QzMmIxYTI3MWE2MmVjYTJmMWE5ZmMwNTIyNjZmZGMwMWEwZDZjIE1vbiBTZXAgMTcg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</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>469855</attachid>
            <date>2024-02-13 14:19:52 -0800</date>
            <delta_ts>2024-02-14 00:14:07 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-269319-20240213141951.patch</filename>
            <type>text/plain</type>
            <size>1447</size>
            <attacher name="chris fleizach">cfleizach</attacher>
            
              <data encoding="base64">RnJvbSBhY2VjYmJjMTA4ODNkNjRlNThlZjAzYTZiNGViZWY2ODEyMmRmN2ZkIE1vbiBTZXAgMTcg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</data>

          </attachment>
      

    </bug>

</bugzilla>