Bug 155943

Summary: AX: Crash when AX trying to create element for an old auto fill element
Product: WebKit Reporter: chris fleizach <cfleizach>
Component: AccessibilityAssignee: chris fleizach <cfleizach>
Status: RESOLVED FIXED    
Severity: Normal CC: aboxhall, apinheiro, commit-queue, dmazzoni, jcraig, jdiggs, mario, samuel_white, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: Safari 9   
Hardware: All   
OS: All   
Attachments:
Description Flags
patch none

Description chris fleizach 2016-03-28 00:17:13 PDT
AX code can access an auto fill element that is still there as a Node, but has no renderer, and then add it to its child list as an empty refPtr

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebCore             	0x00007fff9d11a403 WebCore::AccessibilityRenderObject::addChildren() + 355
1   com.apple.WebCore             	0x00007fff9d108c52 WebCore::AccessibilityObject::updateChildrenIfNecessary() + 66
2   com.apple.WebCore             	0x00007fff9d10460d WebCore::AccessibilityObject::updateBackingStore() + 77
3   com.apple.WebCore             	0x00007fff9dea6dfd -[WebAccessibilityObjectWrapperBase updateObjectBackingStore] + 61
4   com.apple.WebCore             	0x00007fff9deb6ff7 -[WebAccessibilityObjectWrapper accessibilityIsIgnored] + 23
5   com.apple.AppKit              	0x00007fff93d5adbe NSAccessibilityEntryPointIsAccessibilityElement + 231
6   com.apple.AppKit              	0x00007fff93dc5101 NSAccessibilityPostNotificationForObservedElementWithUserInfo + 215
7   com.apple.WebCore             	0x00007fff9d18ee7f WebCore::AXObjectCache::postPlatformNotification(WebCore::AccessibilityObject*, 

<rdar://problem/25350155>
Comment 1 chris fleizach 2016-03-28 00:45:25 PDT
Created attachment 275018 [details]
patch
Comment 2 WebKit Commit Bot 2016-03-28 17:58:22 PDT
Comment on attachment 275018 [details]
patch

Clearing flags on attachment: 275018

Committed r198769: <http://trac.webkit.org/changeset/198769>
Comment 3 WebKit Commit Bot 2016-03-28 17:58:25 PDT
All reviewed patches have been landed.  Closing bug.