Bug 304938

Summary: AX: AXObjectCache::onDocumentRenderTreeCreation can call getOrCreate at times when it's not safe to do so, which causes CheckedPtr crashes
Product: WebKit Reporter: Tyler Wilcock <tyler_w>
Component: AccessibilityAssignee: Tyler Wilcock <tyler_w>
Status: RESOLVED FIXED    
Severity: Normal CC: andresg_22, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: Other   
Hardware: All   
OS: All   

Tyler Wilcock
Reported 2026-01-05 08:32:50 PST
...
Attachments
Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2026-01-05 08:32:56 PST
<rdar://problem/167553600>
Tyler Wilcock
Comment 2 2026-01-05 08:33:06 PST
rdar://165274244
Tyler Wilcock
Comment 3 2026-01-05 10:40:41 PST
Pull request: https://github.com/WebKit/WebKit/pull/56092
EWS
Comment 4 2026-01-05 18:20:09 PST
Committed 305139@main (f664dfad6595): <https://commits.webkit.org/305139@main> Reviewed commits have been landed. Closing PR #56092 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.