Bug 125113

Summary: AX: Crash in accessibilityRoot when Document goes away
Product: WebKit Reporter: chris fleizach <cfleizach>
Component: AccessibilityAssignee: chris fleizach <cfleizach>
Status: RESOLVED FIXED    
Severity: Normal CC: webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: 528+ (Nightly build)   
Hardware: All   
OS: All   
Attachments:
Description Flags
patch thorton: review+

Description chris fleizach 2013-12-02 15:23:53 PST
This crash is happening to VoiceOver users on iOS

Exception Type:  EXC_BAD_ACCESS (SIGSEGV)
Exception Subtype: KERN_INVALID_ADDRESS at 0x0000000000000038
Triggered by Thread:  0


Thread 0 Crashed:
0   WebCore                       	0x000000018f27bbb4 WTF::HashMap<WebCore::Widget*, unsigned int, WTF::PtrHash<WebCore::Widget*>, WTF::HashTraits<WebCore::Widget*>, WTF::HashTraits<unsigned int> >::get(WebCore::Widget* const&) const + 8 (HashTable.h:609)
1   WebCore                       	0x000000018f2571c4 WebCore::AXObjectCache::getOrCreate(WebCore::Widget*) + 48 (AXObjectCache.cpp:322)
2   WebKit                        	0x000000018fd2b84c -[WebFrame(WebPrivate) accessibilityRoot] + 112 (WebFrame.mm:2182)
3   WebKit                        	0x000000018fd46830 -[WebHTMLView accessibilityHitTest:] + 56 (WebHTMLView.mm:4688)


The AXObjectCache is returning nil
Comment 1 chris fleizach 2013-12-02 15:24:02 PST
<rdar://problem/15564742>
Comment 2 chris fleizach 2013-12-02 15:50:13 PST
Created attachment 218231 [details]
patch
Comment 3 chris fleizach 2013-12-03 10:43:12 PST
http://trac.webkit.org/changeset/160015