<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>287715</bug_id>
          
          <creation_ts>2025-02-14 10:44:34 -0800</creation_ts>
          <short_desc>AX: attached layout test triggers assertion in AXIsolatedObject::children</short_desc>
          <delta_ts>2025-02-14 10:51:36 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Accessibility</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>NEW</bug_status>
          <resolution></resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Dominic Mazzoni">dm_mazzoni</reporter>
          <assigned_to name="Dominic Mazzoni">dm_mazzoni</assigned_to>
          <cc>andresg_22</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>2094819</commentid>
    <comment_count>0</comment_count>
      <attachid>474235</attachid>
    <who name="Dominic Mazzoni">dm_mazzoni</who>
    <bug_when>2025-02-14 10:44:34 -0800</bug_when>
    <thetext>Created attachment 474235
Proposed layout test that demonstrates assertion failure

The attached layout test triggers ASSERT(m_children.size() == m_childrenIDs.size());

It appears that a subtree gets removed without the children vector being updated</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2094821</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2025-02-14 10:44:43 -0800</bug_when>
    <thetext>&lt;rdar://problem/144874873&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>474235</attachid>
            <date>2025-02-14 10:44:34 -0800</date>
            <delta_ts>2025-02-14 10:44:34 -0800</delta_ts>
            <desc>Proposed layout test that demonstrates assertion failure</desc>
            <filename>random-styles.html</filename>
            <type>text/html</type>
            <size>2272</size>
            <attacher name="Dominic Mazzoni">dm_mazzoni</attacher>
            
              <data encoding="base64">PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9JRVRGLy9EVEQgSFRNTC8vRU4iPgo8aHRtbD4KPGhl
YWQ+CjxzY3JpcHQgc3JjPSIuLi8uLi9yZXNvdXJjZXMvYWNjZXNzaWJpbGl0eS1oZWxwZXIuanMi
Pjwvc2NyaXB0Pgo8c2NyaXB0IHNyYz0iLi4vLi4vcmVzb3VyY2VzL2pzLXRlc3QuanMiPjwvc2Ny
aXB0Pgo8L2hlYWQ+Cjxib2R5PgoKPHN0eWxlPgogICAgLmJsb2NrIHsKICAgICAgICB3aWR0aDog
NTBweDsKICAgICAgICBoZWlnaHQ6IDUwcHg7CiAgICAgICAgbWFyZ2luOiAxMHB4OwogICAgICAg
IGxpbmUtaGVpZ2h0OiA1MHB4OwogICAgICAgIGJvcmRlcjogMXB4IHNvbGlkICMwMDA7CiAgICAg
ICAgZGlzcGxheTogaW5saW5lLWJsb2NrOwogICAgfQogICAgYnV0dG9uIHsKICAgICAgICBkaXNw
bGF5OiBub25lOwogICAgfQogICAgLnNob3duIHsgZGlzcGxheTogYmxvY2s7IH0KPC9zdHlsZT4K
Cjxib2R5Pgo8ZGl2IGlkPSJjb250YWluZXIiPjwvZGl2PgoKPHNjcmlwdD4KICAgIGNvbnN0IGJs
b2NrQ291bnQgPSAxMDA7CiAgICBjb25zdCBidXR0b25zID0gW107CiAgICBjb25zdCBheEJsb2Nr
cyA9IFtdOwogICAgY29uc3QgY29udGFpbmVyID0gZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoImNv
bnRhaW5lciIpOwoKICAgIGZvciAobGV0IGkgPSAwOyBpIDwgYmxvY2tDb3VudDsgaSsrKSB7CiAg
ICAgICAgY29uc3QgYmxvY2sgPSBkb2N1bWVudC5jcmVhdGVFbGVtZW50KCJhcnRpY2xlIik7CiAg
ICAgICAgYmxvY2suY2xhc3NOYW1lID0gImJsb2NrIjsKICAgICAgICBibG9jay5pZCA9ICJibG9j
ayIgKyBpOwogICAgICAgIGNvbnRhaW5lci5hcHBlbmRDaGlsZChibG9jayk7CgogICAgICAgIGNv
bnN0IGJ1dHRvbiA9IGRvY3VtZW50LmNyZWF0ZUVsZW1lbnQoImJ1dHRvbiIpOwogICAgICAgIGJ1
dHRvbi5pbm5lclRleHQgPSBpOwogICAgICAgIGlmIChNYXRoLnJhbmRvbSgpID4gMC41KSB7CiAg
ICAgICAgICAgIGJ1dHRvbi5jbGFzc0xpc3QuYWRkKCdzaG93bicpOwogICAgICAgIH0KICAgICAg
ICBibG9jay5hcHBlbmRDaGlsZChidXR0b24pOwogICAgICAgIGJ1dHRvbnMucHVzaChidXR0b24p
OwogICAgfQoKICAgIGlmICh3aW5kb3cuYWNjZXNzaWJpbGl0eUNvbnRyb2xsZXIpIHsKICAgICAg
ICB3aW5kb3cuanNUZXN0SXNBc3luYyA9IHRydWU7CgogICAgICAgIGZvciAobGV0IGkgPSAwOyBp
IDwgYmxvY2tDb3VudDsgaSsrKSB7CiAgICAgICAgICAgIGNvbnN0IGF4QmxvY2sgPSBhY2Nlc3Np
YmlsaXR5Q29udHJvbGxlci5hY2Nlc3NpYmxlRWxlbWVudEJ5SWQoImJsb2NrIiArIGkpOwogICAg
ICAgICAgICBheEJsb2Nrcy5wdXNoKGF4QmxvY2spOwogICAgICAgIH0KCiAgICAgICAgdmFyIGl0
ZXJhdGlvbnMgPSAwOwogICAgICAgIGNvbnN0IGludGVydmFsSUQgPSBzZXRJbnRlcnZhbCgoKSA9
PiB7CiAgICAgICAgICAgIGZvciAobGV0IGkgPSAwOyBpIDwgYmxvY2tDb3VudDsgaSsrKSB7CiAg
ICAgICAgICAgICAgICBpZiAoTWF0aC5yYW5kb20oKSA+IDAuNSkgewogICAgICAgICAgICAgICAg
ICAgIGJ1dHRvbnNbaV0uY2xhc3NMaXN0LmFkZCgnc2hvd24nKTsKICAgICAgICAgICAgICAgIH0g
ZWxzZSB7CiAgICAgICAgICAgICAgICAgICAgYnV0dG9uc1tpXS5jbGFzc0xpc3QucmVtb3ZlKCdz
aG93bicpOwogICAgICAgICAgICAgICAgfQogICAgICAgICAgICB9CgogICAgICAgICAgICBmb3Ig
KGxldCBpID0gMDsgaSA8IDEwOyBpKyspIHsKICAgICAgICAgICAgICAgIGNvbnN0IGJsb2NrTnVt
ID0gTWF0aC5mbG9vcihibG9ja0NvdW50ICogTWF0aC5yYW5kb20oKSk7CiAgICAgICAgICAgICAg
ICBjb25zdCBheEJsb2NrID0gYXhCbG9ja3NbYmxvY2tOdW1dOwogICAgICAgICAgICAgICAgY29u
c3QgYXhCdXR0b24gPSBheEJsb2NrLmNoaWxkQXRJbmRleCgwKTsKICAgICAgICAgICAgICAgIGlm
IChheEJ1dHRvbikgewogICAgICAgICAgICAgICAgICAgIGF4QnV0dG9uLnRpdGxlOwogICAgICAg
ICAgICAgICAgfQogICAgICAgICAgICB9CgogICAgICAgICAgICBpdGVyYXRpb25zKys7CiAgICAg
ICAgICAgIGlmIChpdGVyYXRpb25zID09IDEwMCkgewogICAgICAgICAgICAgICAgY2xlYXJJbnRl
cnZhbChpbnRlcnZhbElEKTsKICAgICAgICAgICAgICAgIGRvY3VtZW50LmdldEVsZW1lbnRCeUlk
KCJjb250YWluZXIiKS5oaWRkZW4gPSB0cnVlOwogICAgICAgICAgICAgICAgZmluaXNoSlNUZXN0
KCk7CiAgICAgICAgICAgIH0KICAgICAgICB9LCA0KTsKICAgIH0KPC9zY3JpcHQ+Cg==
</data>

          </attachment>
      

    </bug>

</bugzilla>