0 com.apple.WebCore 0x00007fffc9e29fe7 WebCore::Range::compareBoundaryPoints(WebCore::Range::CompareHow, WebCore::Range const&, int&) const + 23 1 com.apple.WebCore 0x00007fffc9507830 WebCore::AXObjectCache::rangeForUnorderedCharacterOffsets(WebCore::CharacterOffset const&, WebCore::CharacterOffset const&) + 400 2 com.apple.WebCore 0x00007fffca2002e0 -[WebAccessibilityObjectWrapper rangeForTextMarkerRange:] + 224 3 com.apple.WebCore 0x00007fffca2129e8 -[WebAccessibilityObjectWrapper accessibilityAttributeValue:forParameter:] + 15464 <rdar://problem/27821325>
In static bool characterOffsetsInOrder(const CharacterOffset& characterOffset1, const CharacterOffset& characterOffset2) We are getting an NULL range because characterOffset1 is associated with a doctype node.
Created attachment 288625 [details] patch
Created attachment 288629 [details] patch Fixed the build failure.
Comment on attachment 288629 [details] patch View in context: https://bugs.webkit.org/attachment.cgi?id=288629&action=review > Source/WebCore/ChangeLog:9 > + ranges based on the nodes that associated to the passed in CharacterOffsets. When the first node is a doctype that are associated > Source/WebCore/ChangeLog:10 > + node, the first range will be a nullptr. And dereferencing it leads to a crash. Fixed this by adding a one sentence e a nullptr, and der
Created attachment 288632 [details] patch updated from review.
Committed r205845: <http://trac.webkit.org/changeset/205845>