Bug 230828

Summary: Boundary check of AccessibilityMathMLElement::mathOverObject is incorrect
Product: WebKit Reporter: Frédéric Wang (:fredw) <fred.wang>
Component: AccessibilityAssignee: Andres Gonzalez <andresg_22>
Status: RESOLVED FIXED    
Severity: Normal CC: aboxhall, andresg_22, apinheiro, cfleizach, dmazzoni, ews-watchlist, jcraig, jdiggs, samuel_white, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch none

Frédéric Wang (:fredw)
Reported 2021-09-27 06:49:07 PDT
For an munderover tag, we try to access children[2] but only check whether there are at least 2 children.
Attachments
Patch (1.70 KB, patch)
2021-09-27 08:21 PDT, Andres Gonzalez 		no flags
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2021-09-27 06:49:19 PDT
<rdar://problem/83571752>
Andres Gonzalez
Comment 2 2021-09-27 08:21:41 PDT
Created attachment 439355 [details] Patch
EWS
Comment 3 2021-09-27 10:59:54 PDT
Committed r283127 (242185@main): <https://commits.webkit.org/242185@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 439355 [details].
Note You need to log in before you can comment on or make changes to this bug.