| Summary: | AX: Accessing a table cell with an invalid column header crashes | ||||||
|---|---|---|---|---|---|---|---|
| Product: | WebKit | Reporter: | chris fleizach <cfleizach> | ||||
| Component: | Accessibility | Assignee: | chris fleizach <cfleizach> | ||||
| Status: | RESOLVED FIXED | ||||||
| Severity: | Normal | CC: | aboxhall, apinheiro, commit-queue, dmazzoni, jcraig, jdiggs, mario, samuel_white, webkit-bug-importer | ||||
| Priority: | P2 | Keywords: | InRadar | ||||
| Version: | 528+ (Nightly build) | ||||||
| Hardware: | All | ||||||
| OS: | All | ||||||
| Attachments: |
|
||||||
Created attachment 229429 [details]
patch
Comment on attachment 229429 [details] patch Clearing flags on attachment: 229429 Committed r167361: <http://trac.webkit.org/changeset/167361> All reviewed patches have been landed. Closing bug. |
* thread #1: tid = 0x95b3a, 0x0000000113f5dd75 WebCore`WebCore::AccessibilityTableCell::columnHeaders(this=0x00007ff91a48cd60, headers=0x00007fff53bdb1c8) + 389 at AccessibilityTableCell.cpp:184, queue = 'com.apple.main-thread', stop reason = EXC_BAD_ACCESS (code=1, address=0x0) frame #0: 0x0000000113f5dd75 WebCore`WebCore::AccessibilityTableCell::columnHeaders(this=0x00007ff91a48cd60, headers=0x00007fff53bdb1c8) + 389 at AccessibilityTableCell.cpp:184 181 continue; 182 183 std::pair<unsigned, unsigned> childRowRange; -> 184 tableCell->rowIndexRange(childRowRange); 185 186 const AtomicString& scope = tableCell->getAttribute(scopeAttr); 187 if (scope == "col" || tableCell->isTableHeaderCell())