Bug 316278

Summary: AX: AXObjectCache destructor wipes a newer cache's isolated tree out of treeFrameCache during overlapping iframe document transitions
Product: WebKit Reporter: Tyler Wilcock <tyler_w>
Component: AccessibilityAssignee: Tyler Wilcock <tyler_w>
Status: RESOLVED FIXED    
Severity: Normal CC: andresg_22, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: Other   
Hardware: All   
OS: All   

Tyler Wilcock
Reported 2026-06-03 21:18:03 PDT
...
Attachments
Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2026-06-03 21:18:09 PDT
<rdar://problem/178687525>
Tyler Wilcock
Comment 2 2026-06-03 21:22:45 PDT
rdar://178166741
Tyler Wilcock
Comment 3 2026-06-04 08:14:06 PDT
Pull request: https://github.com/WebKit/WebKit/pull/66447
EWS
Comment 4 2026-06-04 13:42:50 PDT
Committed 314572@main (28e2def3391f): <https://commits.webkit.org/314572@main> Reviewed commits have been landed. Closing PR #66447 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.