Bug 236053

Summary:

Crash in AXIsolatedObject::associatedAXObject.

Product:

WebKit

Reporter:

Andres Gonzalez <andresg_22>

Component:

Accessibility

Assignee:

Andres Gonzalez <andresg_22>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

aboxhall, andresg_22, apinheiro, cfleizach, darin, dmazzoni, ews-watchlist, jcraig, jdiggs, samuel_white, webkit-bug-importer

Priority:

Keywords:

InRadar

Version:

WebKit Nightly Build

Hardware:

Unspecified

OS:

Unspecified

Attachments:

Description	Flags
Patch	none

Description Andres Gonzalez 2022-02-02 18:52:08 PST

Crash in AXIsolatedObject::associatedAXObject.

Comment 1 Radar WebKit Bug Importer 2022-02-02 18:52:22 PST

<rdar://problem/88413232>

Comment 2 Andres Gonzalez 2022-02-02 19:05:29 PST

(lldb) bt
* thread #1, queue = 'com.apple.main-thread', stop reason = signal SIGABRT
  * frame #0: 0x00007ff810c1403e libsystem_kernel.dylib`__pthread_kill + 10
    frame #1: 0x00007ff810c4a1d0 libsystem_pthread.dylib`pthread_kill + 263
    frame #2: 0x00007ff810b95d24 libsystem_c.dylib`abort + 123
    frame #3: 0x00007ff810c06082 libc++abi.dylib`abort_message + 241
    frame #4: 0x00007ff810c05ab2 libc++abi.dylib`__cxa_pure_virtual + 18
    frame #5: 0x000000060ddec600 WebCore`WebCore::AXIsolatedObject::relativeFrame(this=0x000070000e29b440) const::$_49::operator()() const at AXIsolatedObject.cpp:1214:30
    frame #6: 0x000000060ddec591 WebCore`WebCore::FloatRect WebCore::Accessibility::retrieveValueFromMainThread<WebCore::FloatRect, WebCore::AXIsolatedObject::relativeFrame() const::$_49>(this=0x00000005d5482208) const::$_49&&)::'lambda'()::operator()() const at AccessibilityObjectInterface.h:1675:17
    frame #7: 0x000000060ddec529 WebCore`WTF::Detail::CallableWrapper<WebCore::FloatRect WebCore::Accessibility::retrieveValueFromMainThread<WebCore::FloatRect, WebCore::AXIsolatedObject::relativeFrame() const::$_49>(WebCore::AXIsolatedObject::relativeFrame() const::$_49&&)::'lambda'(), void>::call(this=0x00000005d5482200) at Function.h:53:39
    frame #8: 0x00000005f7a9e8f2 JavaScriptCore`WTF::Function<void ()>::operator(this=0x00000005d5482230)() const at Function.h:82:35
    frame #9: 0x00000005f7aee19d JavaScriptCore`void WTF::callOnMainAndWait<(WTF::MainStyle)0>(this=0x00000005d5482228)>&&)::'lambda'()::operator()() const at MainThread.cpp:123:9
    frame #10: 0x00000005f7aee0f9 JavaScriptCore`WTF::Detail::CallableWrapper<void WTF::callOnMainAndWait<(WTF::MainStyle)0>(WTF::Function<void ()>&&)::'lambda'(), void>::call(this=0x00000005d5482220) at Function.h:53:39
    frame #11: 0x00000005f7a9e8f2 JavaScriptCore`WTF::Function<void ()>::operator(this=0x00007ff7b1974640)() const at Function.h:82:35
    frame #12: 0x00000005f7b2571e JavaScriptCore`WTF::RunLoop::performWork(this=0x00000005d500c180) at RunLoop.cpp:133:9
    frame #13: 0x00000005f7b28fee JavaScriptCore`WTF::RunLoop::performWork(context=0x00000005d500c180) at RunLoopCF.cpp:46:37
    frame #14: 0x00007ff810d10c5b CoreFoundation`__CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
    frame #15: 0x00007ff810d10bc3 CoreFoundation`__CFRunLoopDoSource0 + 180
    frame #16: 0x00007ff810d1093d CoreFoundation`__CFRunLoopDoSources0 + 242
    frame #17: 0x00007ff810d0f358 CoreFoundation`__CFRunLoopRun + 892
    frame #18: 0x00007ff810d0e91c CoreFoundation`CFRunLoopRunSpecific + 562
    frame #19: 0x00007ff811b5c52a Foundation`-[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 216
    frame #20: 0x00007ff811be6f67 Foundation`-[NSRunLoop(NSRunLoop) run] + 76
    frame #21: 0x00007ff810992816 libxpc.dylib`_xpc_objc_main + 773
    frame #22: 0x00007ff810992239 libxpc.dylib`xpc_main + 99
    frame #23: 0x00000005dc9c79b0 WebKit`WebKit::XPCServiceMain((null)=1, (null)=0x00007ff7b1975940) at XPCServiceMain.mm:223:5
    frame #24: 0x00000005de54ad4b WebKit`WKXPCServiceMain(argc=1, argv=0x00007ff7b1975940) at WKMain.mm:35:12
    frame #25: 0x000000010e58dea2 com.apple.WebKit.WebContent.Development`main(argc=1, argv=0x00007ff7b1975940) at AuxiliaryProcessMain.cpp:30:12
    frame #26: 0x000000011755350e dyld`start + 462
(lldb)

Comment 3 Andres Gonzalez 2022-02-02 19:05:52 PST

Created attachment 450728 [details]
Patch

Comment 4 EWS 2022-02-03 05:24:54 PST

Committed r289044 (246751@main): <https://commits.webkit.org/246751@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 450728 [details].