84104 2012-04-16 17:20:19 -0700 Crash in invalid index for _textMarkerForIndex 2012-04-17 12:48:36 -0700 1 1 1 Unclassified WebKit Accessibility 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 cfleizach cfleizach bdakin webkit.review.bot oldest_to_newest 603604 0 cfleizach 2012-04-16 17:20:19 -0700 if you pass in an invalid index, you can crash or assert Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 com.apple.WebCore 0x000000010fb05771 WebCore::RangeBoundaryPoint::toPosition() const + 17 1 com.apple.WebCore 0x00000001103b6f8b -[WebAccessibilityObjectWrapper _textMarkerForIndex:] + 91 2 com.apple.WebCore 0x00000001103b8502 -[WebAccessibilityObjectWrapper accessibilityAttributeValue:forParameter:] + 5042 3 com.apple.AppKit 0x000000010611db36 CopyParameterizedAttributeValue + 328 4 com.apple.HIServices 0x00000001094114c9 _AXXMIGCopyParameterizedAttributeValue + 265 5 com.apple.HIServices 0x000000010941b0b2 _XCopyParameterizedAttributeValue + 576 603606 1 cfleizach 2012-04-16 17:21:07 -0700 rdar://11247276 603817 2 137482 cfleizach 2012-04-16 23:00:23 -0700 Created attachment 137482 patch 604255 3 137482 webkit.review.bot 2012-04-17 12:48:32 -0700 Comment on attachment 137482 patch Clearing flags on attachment: 137482 Committed r114418: <http://trac.webkit.org/changeset/114418> 604256 4 webkit.review.bot 2012-04-17 12:48:36 -0700 All reviewed patches have been landed. Closing bug. 137482 2012-04-16 23:00:23 -0700 2012-04-17 12:48:32 -0700 patch patch.txt text/plain 4086 cfleizach SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDExNDM0NikKKysrIFNvdXJjZS9XZWJDb3JlL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE1IEBACisyMDEyLTA0LTE2ICBDaHJpcyBG bGVpemFjaCAgPGNmbGVpemFjaEBhcHBsZS5jb20+CisKKyAgICAgICAgQ3Jhc2ggaW4gaW52YWxp ZCBpbmRleCBmb3IgX3RleHRNYXJrZXJGb3JJbmRleAorICAgICAgICBodHRwczovL2J1Z3Mud2Vi a2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9ODQxMDQKKworICAgICAgICBSZXZpZXdlZCBieSBOT0JP RFkgKE9PUFMhKS4KKworICAgICAgICBUZXN0OiBwbGF0Zm9ybS9tYWMvYWNjZXNzaWJpbGl0eS90 ZXh0bWFya2VyLWZvci1pbmRleC1vdXQtb2YtYm91bmRzLWNyYXNoLmh0bWwKKworICAgICAgICAq IGFjY2Vzc2liaWxpdHkvbWFjL1dlYkFjY2Vzc2liaWxpdHlPYmplY3RXcmFwcGVyLm1tOgorICAg ICAgICAoLVtXZWJBY2Nlc3NpYmlsaXR5T2JqZWN0V3JhcHBlciBfdGV4dE1hcmtlckZvckluZGV4 Ol0pOgorCiAyMDEyLTA0LTE2ICBKYW1lcyBSb2JpbnNvbiAgPGphbWVzckBjaHJvbWl1bS5vcmc+ CiAKICAgICAgICAgW2Nocm9taXVtXSBNb3ZlIHBhaW50UmVuZGVyZWRSZXN1bHRzVG9DYW52YXMg Y29kZSBpbnRvIERyYXdpbmdCdWZmZXIKSW5kZXg6IFNvdXJjZS9XZWJDb3JlL2FjY2Vzc2liaWxp dHkvbWFjL1dlYkFjY2Vzc2liaWxpdHlPYmplY3RXcmFwcGVyLm1tCj09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNv dXJjZS9XZWJDb3JlL2FjY2Vzc2liaWxpdHkvbWFjL1dlYkFjY2Vzc2liaWxpdHlPYmplY3RXcmFw cGVyLm1tCShyZXZpc2lvbiAxMTMxMzcpCisrKyBTb3VyY2UvV2ViQ29yZS9hY2Nlc3NpYmlsaXR5 L21hYy9XZWJBY2Nlc3NpYmlsaXR5T2JqZWN0V3JhcHBlci5tbQkod29ya2luZyBjb3B5KQpAQCAt MjgwNSw3ICsyODA1LDkgQEAKICAgICAgICAgcmV0dXJuIG5pbDsKICAgICAKICAgICBQYXNzUmVm UHRyPFJhbmdlPiB0ZXh0UmFuZ2UgPSBUZXh0SXRlcmF0b3I6OnJhbmdlRnJvbUxvY2F0aW9uQW5k TGVuZ3RoKGRvY3VtZW50LT5kb2N1bWVudEVsZW1lbnQoKSwgdGV4dEluZGV4LCAwKTsKLSAgICAK KyAgICBpZiAoIXRleHRSYW5nZSB8fCAhdGV4dFJhbmdlLT5ib3VuZGFyeVBvaW50c1ZhbGlkKCkp CisgICAgICAgIHJldHVybiBuaWw7CisKICAgICBWaXNpYmxlUG9zaXRpb24gcG9zaXRpb24odGV4 dFJhbmdlLT5zdGFydFBvc2l0aW9uKCkpOwogICAgIHJldHVybiBbc2VsZiB0ZXh0TWFya2VyRm9y VmlzaWJsZVBvc2l0aW9uOnBvc2l0aW9uXTsKIH0KSW5kZXg6IExheW91dFRlc3RzL0NoYW5nZUxv Zwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9DaGFuZ2VMb2cJKHJldmlzaW9uIDExMjk4OSkK KysrIExheW91dFRlc3RzL0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDEzIEBA CisyMDEyLTA0LTE2ICBDaHJpcyBGbGVpemFjaCAgPGNmbGVpemFjaEBhcHBsZS5jb20+CisKKyAg ICAgICAgQ3Jhc2ggaW4gaW52YWxpZCBpbmRleCBmb3IgX3RleHRNYXJrZXJGb3JJbmRleAorICAg ICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9ODQxMDQKKworICAg ICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICAqIHBsYXRmb3JtL21h Yy9hY2Nlc3NpYmlsaXR5L3RleHRtYXJrZXItZm9yLWluZGV4LW91dC1vZi1ib3VuZHMtY3Jhc2gt ZXhwZWN0ZWQudHh0OiBBZGRlZC4KKyAgICAgICAgKiBwbGF0Zm9ybS9tYWMvYWNjZXNzaWJpbGl0 eS90ZXh0bWFya2VyLWZvci1pbmRleC1vdXQtb2YtYm91bmRzLWNyYXNoLmh0bWw6IEFkZGVkLgor CiAyMDEyLTA0LTAzICBDaHJpcyBGbGVpemFjaCAgPGNmbGVpemFjaEBhcHBsZS5jb20+CiAKICAg ICAgICAgQVg6IHNlYXJjaCBmaWVsZCBvbiBHb29nbGUuY29tIGRvZXMgbm90IGhhdmUgdGhlIEFY U2VhcmNoRmllbGQgc3Vicm9sZQpJbmRleDogTGF5b3V0VGVzdHMvcGxhdGZvcm0vbWFjL2FjY2Vz c2liaWxpdHkvdGV4dG1hcmtlci1mb3ItaW5kZXgtb3V0LW9mLWJvdW5kcy1jcmFzaC5odG1sCj09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT0KLS0tIExheW91dFRlc3RzL3BsYXRmb3JtL21hYy9hY2Nlc3NpYmlsaXR5L3RleHRt YXJrZXItZm9yLWluZGV4LW91dC1vZi1ib3VuZHMtY3Jhc2guaHRtbAkocmV2aXNpb24gMCkKKysr IExheW91dFRlc3RzL3BsYXRmb3JtL21hYy9hY2Nlc3NpYmlsaXR5L3RleHRtYXJrZXItZm9yLWlu ZGV4LW91dC1vZi1ib3VuZHMtY3Jhc2guaHRtbAkocmV2aXNpb24gMCkKQEAgLTAsMCArMSwzMSBA QAorPCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9JRVRGLy9EVEQgSFRNTC8vRU4iPgorPGh0bWw+ Cis8c2NyaXB0IHNyYz0iLi4vLi4vLi4vZmFzdC9qcy9yZXNvdXJjZXMvanMtdGVzdC1wcmUuanMi Pjwvc2NyaXB0PgorPGJvZHkgaWQ9ImJvZHkiIHRhYmluZGV4PSIwIj4KKworPGRpdiB0YWJpbmRl eD0iMCIgaWQ9InRleHQxIj50ZXh0PC9kaXY+CisKK3RleHQKKworPGRpdiB0YWJpbmRleD0iMCIg aWQ9InRleHQyIj50ZXh0PC9kaXY+CisKKzxwIGlkPSJkZXNjcmlwdGlvbiI+PC9wPgorPGRpdiBp ZD0iY29uc29sZSI+PC9kaXY+CisKKzxzY3JpcHQ+CisKKyAgICBkZXNjcmlwdGlvbigiVGhpcyB2 ZXJpZmllcyB0aGF0IHRleHRNYXJrZXJGb3JJbmRleCBmb3Igbm90IGNyYXNoIHdoZW4gZ2l2ZW4g YW4gaW5kZXggb3V0IG9mIGJvdW5kcyIpOworCisgICAgaWYgKHdpbmRvdy5hY2Nlc3NpYmlsaXR5 Q29udHJvbGxlcikgeworICAgICAgICBkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgidGV4dDEiKS5m b2N1cygpOworICAgICAgICB2YXIgaXRlbTEgPSBhY2Nlc3NpYmlsaXR5Q29udHJvbGxlci5mb2N1 c2VkRWxlbWVudDsKKyAgICAgICAgc2hvdWxkQmVGYWxzZSgiaXRlbTEuaXNUZXh0TWFya2VyVmFs aWQoaXRlbTEudGV4dE1hcmtlckZvckluZGV4KDk5OTk5OTk5OTk5KSkiKTsgICAgICAgCisgICAg fQorCis8L3NjcmlwdD4KKworPHNjcmlwdCBzcmM9Ii4uLy4uLy4uL2Zhc3QvanMvcmVzb3VyY2Vz L2pzLXRlc3QtcG9zdC5qcyI+PC9zY3JpcHQ+CisKKzwvYm9keT4KKzwvaHRtbD4KKwpJbmRleDog TGF5b3V0VGVzdHMvcGxhdGZvcm0vbWFjL2FjY2Vzc2liaWxpdHkvdGV4dG1hcmtlci1mb3ItaW5k ZXgtb3V0LW9mLWJvdW5kcy1jcmFzaC1leHBlY3RlZC50eHQKPT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gTGF5b3V0 VGVzdHMvcGxhdGZvcm0vbWFjL2FjY2Vzc2liaWxpdHkvdGV4dG1hcmtlci1mb3ItaW5kZXgtb3V0 LW9mLWJvdW5kcy1jcmFzaC1leHBlY3RlZC50eHQJKHJldmlzaW9uIDApCisrKyBMYXlvdXRUZXN0 cy9wbGF0Zm9ybS9tYWMvYWNjZXNzaWJpbGl0eS90ZXh0bWFya2VyLWZvci1pbmRleC1vdXQtb2Yt Ym91bmRzLWNyYXNoLWV4cGVjdGVkLnR4dAkocmV2aXNpb24gMCkKQEAgLTAsMCArMSwxMyBAQAor dGV4dAordGV4dAordGV4dAorVGhpcyB2ZXJpZmllcyB0aGF0IHRleHRNYXJrZXJGb3JJbmRleCBm b3Igbm90IGNyYXNoIHdoZW4gZ2l2ZW4gYW4gaW5kZXggb3V0IG9mIGJvdW5kcworCitPbiBzdWNj ZXNzLCB5b3Ugd2lsbCBzZWUgYSBzZXJpZXMgb2YgIlBBU1MiIG1lc3NhZ2VzLCBmb2xsb3dlZCBi eSAiVEVTVCBDT01QTEVURSIuCisKKworUEFTUyBpdGVtMS5pc1RleHRNYXJrZXJWYWxpZChpdGVt MS50ZXh0TWFya2VyRm9ySW5kZXgoOTk5OTk5OTk5OTkpKSBpcyBmYWxzZQorUEFTUyBzdWNjZXNz ZnVsbHlQYXJzZWQgaXMgdHJ1ZQorCitURVNUIENPTVBMRVRFCisK