Bug 302277

Summary: AX: AXObjectCache::handleActiveDescendantChange does not null-check frame before dereferencing, which can cause crashes
Product: WebKit Reporter: Tyler Wilcock <tyler_w>
Component: AccessibilityAssignee: Tyler Wilcock <tyler_w>
Status: RESOLVED FIXED    
Severity: Normal CC: andresg_22, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: Other   
Hardware: All   
OS: All   

Tyler Wilcock
Reported 2025-11-10 10:46:27 PST
...
Attachments
Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2025-11-10 10:46:33 PST
<rdar://problem/164416627>
Tyler Wilcock
Comment 2 2025-11-10 10:47:06 PST
rdar://164300464
Tyler Wilcock
Comment 3 2025-11-10 10:49:17 PST
Pull request: https://github.com/WebKit/WebKit/pull/53693
EWS
Comment 4 2025-11-10 18:07:56 PST
Committed 302824@main (f579e4d0e7c2): <https://commits.webkit.org/302824@main> Reviewed commits have been landed. Closing PR #53693 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.