Bug 208942 - AX: Isolated tree: Crash in URL retrieval
Summary: AX: Isolated tree: Crash in URL retrieval
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: Accessibility (show other bugs)
Version: WebKit Nightly Build
Hardware: All All
: P2 Normal
Assignee: Andres Gonzalez
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2020-03-11 13:13 PDT by chris fleizach
Modified: 2020-03-12 11:43 PDT (History)
9 users (show)

See Also:

Attachments
Patch (8.31 KB, patch)
2020-03-11 17:50 PDT, Andres Gonzalez 		no flags Details | Formatted Diff | Diff
Patch (8.21 KB, patch)
2020-03-11 20:33 PDT, Andres Gonzalez 		no flags Details | Formatted Diff | Diff
Patch (9.00 KB, patch)
2020-03-12 05:34 PDT, Andres Gonzalez 		no flags Details | Formatted Diff | Diff
Show Obsolete (2) View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description chris fleizach 2020-03-11 13:13:31 PDT 
hread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebCore             	0x00000001103095ae WebCore::AccessibilityRenderObject::url() const + 62 (AccessibilityRenderObject.cpp:1644)
1   com.apple.WebCore             	0x0000000110321a69 WebCore::AXIsolatedObject::initializeAttributeData(WebCore::AXCoreObject&, bool) + 12233 (AXIsolatedObject.cpp:194)
2   com.apple.WebCore             	0x00000001103252a8 WebCore::AXIsolatedObject::create(WebCore::AXCoreObject&, unsigned int, unsigned int) + 56 (AXIsolatedObject.cpp:48)
3   com.apple.WebCore             	0x00000001102df2f5 WebCore::createIsolatedTreeHierarchy(WebCore::AXCoreObject&, unsigned int, unsigned int, bool, WTF::Vector<WebCore::AXIsolatedTree::NodeChange, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&) + 37 (AXObjectCache.cpp:3101)
4   com.apple.WebCore             	0x00000001102df3f7 WebCore::createIsolatedTreeHierarchy(WebCore::AXCoreObject&, unsigned int, unsigned int, bool, WTF::Vector<WebCore::AXIsolatedTree::NodeChange, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&) + 295 (AXObjectCache.cpp:3113)
5   com.apple.WebCore             	0x00000001102d6ce0 WebCore::AXObjectCache::updateIsolatedTree(WebCore::AXCoreObject*, WebCore::AXObjectCache::AXNotification) + 176 (AXObjectCache.cpp:3166)
6   com.apple.WebCore             	0x00000001102d5f0d WebCore::AXObjectCache::postNotification(WebCore::AXCoreObject*, WebCore::Document*, WebCore::AXObjectCache::AXNotification, WebCore::PostTarget, WebCore::PostType) + 157 (AXObjectCache.cpp:1142)
7   com.apple.WebCore             	0x00000001102ec243 WebCore::AccessibilityNodeObject::childrenChanged() + 115 (AccessibilityNodeObject.cpp:128)
8   com.apple.WebCore             	0x00000001102dec3c WebCore::AXObjectCache::performDeferredCacheUpdate() + 220
Comment 1 Radar WebKit Bug Importer 2020-03-11 13:13:42 PDT 
<rdar://problem/60337547>
Comment 2 Radar WebKit Bug Importer 2020-03-11 13:14:41 PDT 
<rdar://problem/60337588>
Comment 3 Andres Gonzalez 2020-03-11 17:50:14 PDT 
Created attachment 393317 [details]
Patch
Comment 4 Andres Gonzalez 2020-03-11 20:33:27 PDT 
Created attachment 393334 [details]
Patch
Comment 5 chris fleizach 2020-03-11 21:29:47 PDT 
Test fail on win
We might want to skip that platform
Comment 6 Andres Gonzalez 2020-03-12 05:34:18 PDT 
Created attachment 393359 [details]
Patch
Comment 7 Andres Gonzalez 2020-03-12 05:40:41 PDT 
Test skipped in win.
Comment 8 WebKit Commit Bot 2020-03-12 11:43:07 PDT 
Comment on attachment 393359 [details]
Patch

Clearing flags on attachment: 393359

Committed r258346: <https://trac.webkit.org/changeset/258346>
Comment 9 WebKit Commit Bot 2020-03-12 11:43:09 PDT 
All reviewed patches have been landed.  Closing bug.