<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>28829</bug_id>
          
          <creation_ts>2009-08-29 16:19:32 -0700</creation_ts>
          <short_desc>Crash in AccessibilityRenderObject::activeDescendant when trying to set aria-activedescendant to something without a renderer</short_desc>
          <delta_ts>2009-08-29 17:12:49 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Accessibility</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>PC</rep_platform>
          <op_sys>OS X 10.5</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Adele Peterson">adele</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>bdakin</cc>
    
    <cc>cfleizach</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>143523</commentid>
    <comment_count>0</comment_count>
      <attachid>38777</attachid>
    <who name="Adele Peterson">adele</who>
    <bug_when>2009-08-29 16:19:32 -0700</bug_when>
    <thetext>Created attachment 38777
crashing test case

Crash in AccessibilityRenderObject::activeDescendant when trying to set aria-activedescendant to something without a renderer

I could only get this crash to happen when using VoiceOver.  See the attached test case.  Just a simple nil check - I&apos;ll attach a patch soon.

Is there a way to trigger the accessibility API through DRT?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>143524</commentid>
    <comment_count>1</comment_count>
    <who name="Adele Peterson">adele</who>
    <bug_when>2009-08-29 16:41:11 -0700</bug_when>
    <thetext>to answer my own question, yes :)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>143525</commentid>
    <comment_count>2</comment_count>
      <attachid>38778</attachid>
    <who name="Adele Peterson">adele</who>
    <bug_when>2009-08-29 16:53:54 -0700</bug_when>
    <thetext>Created attachment 38778
patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>143526</commentid>
    <comment_count>3</comment_count>
    <who name="Adele Peterson">adele</who>
    <bug_when>2009-08-29 17:00:14 -0700</bug_when>
    <thetext>Committed revision 47883.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>143527</commentid>
    <comment_count>4</comment_count>
    <who name="Adele Peterson">adele</who>
    <bug_when>2009-08-29 17:12:49 -0700</bug_when>
    <thetext>&lt;rdar://problem/7181680&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>38777</attachid>
            <date>2009-08-29 16:19:32 -0700</date>
            <delta_ts>2009-08-29 16:19:32 -0700</delta_ts>
            <desc>crashing test case</desc>
            <filename>aria-voiceover-crash-2.html</filename>
            <type>text/html</type>
            <size>228</size>
            <attacher name="Adele Peterson">adele</attacher>
            
              <data encoding="base64">PGlucHV0IHR5cGU9ImJ1dHRvbiIgb25jbGljaz0idGhpcy5zZXRBdHRyaWJ1dGUoJ2FyaWEtYWN0
aXZlZGVzY2VuZGFudCcsICdoaWRkZW5FbGVtZW50JykiIHZhbHVlPSJVc2UgVm9pY2VPdmVyIHRv
IGFjdGl2YXRlIHRoaXMgYnV0dG9uLCBhbmQgdGhlbiBuYXZpZ2F0ZSB0byB0aGUgbmV4dCBlbGVt
ZW50Ij4KPGRpdiBpZD0iaGlkZGVuRWxlbWVudCIgc3R5bGU9ImRpc3BsYXk6bm9uZSI+PC9kaXY+
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>38778</attachid>
            <date>2009-08-29 16:53:54 -0700</date>
            <delta_ts>2009-08-29 16:58:23 -0700</delta_ts>
            <desc>patch</desc>
            <filename>patch_crash_aria.txt</filename>
            <type>text/plain</type>
            <size>3921</size>
            <attacher name="Adele Peterson">adele</attacher>
            
              <data encoding="base64">SW5kZXg6IFdlYkNvcmUvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09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</data>
<flag name="review"
          id="19768"
          type_id="1"
          status="+"
          setter="mitz"
    />
          </attachment>
      

    </bug>

</bugzilla>