Bug 113937

Summary: WebSpeech: crash at WebCore::SpeechSynthesis::speak
Product: WebKit Reporter: chris fleizach <cfleizach>
Component: AccessibilityAssignee: chris fleizach <cfleizach>
Status: RESOLVED FIXED    
Severity: Normal CC: commit-queue, jcraig, thorton, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
patch none

Description chris fleizach 2013-04-04 08:50:47 PDT
WebKit crashes when you send speechSynthesis.speak() a string value instead of a SpeechSynthesisUtterance object.

speechSynthesis.speak('Hello World');

* BACKTRACE ('>' indicates stack frame used for CrashTracer aggregation)

>  1 com.apple.WebCore              0x7fff84612eb2 WebCore::SpeechSynthesis::speak(WebCore::SpeechSynthesisUtterance*) + 0x92
   2 com.apple.WebCore              0x7fff8435a91e WebCore::jsSpeechSynthesisPrototypeFunctionSpeak(JSC::ExecState*) + 0xce
   3                                0x00004830df601045 0 + 79374743244869
   4 com.apple.JavaScriptCore       0x7fff902fda78 JSC::Interpreter::execute(JSC::EvalExecutable*, JSC::ExecState*, JSC::JSValue, JSC::JSScope*) + 0x5a8
   5 com.apple.JavaScriptCore       0x7fff901e363f JSC::globalFuncEval(JSC::ExecState*) + 0x41f
   6 com.apple.JavaScriptCore       0x7fff9016e1e1 JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 0x241
Comment 1 chris fleizach 2013-04-04 08:52:31 PDT
Created attachment 196481 [details]
patch
Comment 2 chris fleizach 2013-04-04 08:53:21 PDT
adding Tim to help with review.
Comment 3 chris fleizach 2013-04-05 14:41:23 PDT
Comment on attachment 196481 [details]
patch

Thanks!
Comment 4 WebKit Commit Bot 2013-04-05 14:49:44 PDT
Comment on attachment 196481 [details]
patch

Clearing flags on attachment: 196481

Committed r147800: <http://trac.webkit.org/changeset/147800>
Comment 5 WebKit Commit Bot 2013-04-05 14:49:46 PDT
All reviewed patches have been landed.  Closing bug.
Comment 6 James Craig 2013-05-13 14:42:54 PDT
<rdar://problem/13572670>