Bug 133873 - AX: Crash at WebCore::AXObjectCache::textChanged
Summary: AX: Crash at WebCore::AXObjectCache::textChanged
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: Accessibility (show other bugs)
Version: 528+ (Nightly build)
Hardware: All All
: P2 Normal
Assignee: chris fleizach
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2014-06-13 12:04 PDT by chris fleizach
Modified: 2014-06-16 14:02 PDT (History)
11 users (show)

See Also:


Attachments
patch (1.70 KB, patch)
2014-06-13 12:08 PDT, chris fleizach
no flags Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description chris fleizach 2014-06-13 12:04:34 PDT
Thread 0:
0   libsystem_kernel.dylib        	0x0000000198be9cc0 mach_msg_trap + 8
1   CoreFoundation                	0x000000018c1a6ca8 __CFRunLoopServiceMachPort + 180 (CFRunLoop.c:2257)
2   CoreFoundation                	0x000000018c1a4e9c __CFRunLoopRun + 932 (CFRunLoop.c:2492)
3   CoreFoundation                	0x000000018c0e5b34 CFRunLoopRunSpecific + 448 (CFRunLoop.c:2681)
4   GraphicsServices              	0x0000000191ab782c GSEventRunModal + 164 (GSEvent.c:2129)
5   UIKit                         	0x000000018f1240e4 UIApplicationMain + 1152 (UIApplication.m:2431)
6   MobileSafari                  	0x000000010003d2ec main + 1900 (main.m:205)
7   libdyld.dylib                 	0x0000000198b07a9c start + 0

Thread 1:
0   libsystem_kernel.dylib        	0x0000000198be9ac8 kevent64 + 8
1   libdispatch.dylib             	0x0000000198aedd74 _dispatch_mgr_thread + 48 (source.c:2309)

Thread 2 name:  WebThread
Thread 2 Crashed:
0   WebCore                       	0x0000000195ade3f0 WebCore::AXObjectCache::textChanged(WebCore::AccessibilityObject*) + 32 (AXObjectCache.cpp:599)
1   WebCore                       	0x0000000195adec04 WebCore::AXObjectCache::handleAttributeChanged(WebCore::QualifiedName const&, WebCore::Element*) + 108 (AXObjectCache.cpp:586)
2   WebCore                       	0x0000000195798734 WebCore::Element::attributeChanged(WebCore::QualifiedName const&, WTF::AtomicString const&, WebCore::Element::AttributeModificationReason) + 944 (Element.cpp:1062)
3   WebCore                       	0x0000000195797748 WebCore::Element::addAttributeInternal(WebCore::QualifiedName const&, WTF::AtomicString const&, WebCore::Element::SynchronizationOfLazyAttribute) + 172 (Element.cpp:3078)
4   WebCore                       	0x000000019579742c WebCore::Element::setAttributeInternal(unsigned int, WebCore::QualifiedName const&, WTF::AtomicString const&, WebCore::Element::SynchronizationOfLazyAttribute) + 80 (Element.cpp:990)
5   WebCore                       	0x000000019579d08c WebCore::Element::setAttribute(WTF::AtomicString const&, WTF::AtomicString const&, int&) + 304 (Element.cpp:965)
6   WebCore                       	0x000000019579cec0 WebCore::jsElementPrototypeFunctionSetAttribute(JSC::ExecState*) + 664 (JSElement.cpp:1808)
7   ???                           	0x0000000102ef403c 0 + 4344201276
8   WebCore                       	0x0000000195795580 WebCore::ScheduledAction::executeFunctionInContext(JSC::JSGlobalObject*, JSC::JSValue, WebCore::ScriptExecutionContext*) + 544 (JSMainThreadExecState.h:64)
9   WebCore                       	0x0000000195794f40 WebCore::ScheduledAction::execute(WebCore::Document*) + 136 (ScheduledAction.cpp:132)
10  WebCore                       	0x0000000195794364 WebCore::DOMTimer::fired() + 540 (DOMTimer.cpp:183)
11  WebCore                       	0x0000000195793d90 WebCore::ThreadTimers::sharedTimerFiredInternal() + 148 (ThreadTimers.cpp:143)
12  WebCore                       	0x0000000195793cd0 WebCore::timerFired(__CFRunLoopTimer*, void*) + 32 (SharedTimerIOS.mm:62)
13  CoreFoundation                	0x000000018c1a7688 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ + 24 (CFRunLoop.c:1604)
14  CoreFoundation                	0x000000018c1a72f8 __CFRunLoopDoTimer + 800 (CFRunLoop.c:2090)
15  CoreFoundation                	0x000000018c1a5020 __CFRunLoopRun + 1320 (CFRunLoop.c:2218)
16  CoreFoundation                	0x000000018c0e5b34 CFRunLoopRunSpecific + 448 (CFRunLoop.c:2681)
17  WebCore                       	0x0000000195850b98 RunWebThread(void*) + 468 (WebCoreThread.mm:667)
18  libsystem_pthread.dylib       	0x0000000198c841ac _pthread_body + 164 (pthread.c:629)
19  libsystem_pthread.dylib       	0x0000000198c84104 _pthread_start + 136 (pthread.c:654)
20  libsystem_pthread.dylib       	0x0000000198c817ac thread_start + 0


<rdar://problem/15414279>
Comment 1 chris fleizach 2014-06-13 12:08:26 PDT
Created attachment 233066 [details]
patch
Comment 2 Enrica Casucci 2014-06-16 13:30:25 PDT
Comment on attachment 233066 [details]
patch

Seems reasonable to me.
Comment 3 chris fleizach 2014-06-16 13:31:17 PDT
Comment on attachment 233066 [details]
patch

thanks!
Comment 4 WebKit Commit Bot 2014-06-16 14:02:04 PDT
Comment on attachment 233066 [details]
patch

Clearing flags on attachment: 233066

Committed r170026: <http://trac.webkit.org/changeset/170026>
Comment 5 WebKit Commit Bot 2014-06-16 14:02:08 PDT
All reviewed patches have been landed.  Closing bug.