Bug 230828 - Boundary check of AccessibilityMathMLElement::mathOverObject is incorrect
Summary: Boundary check of AccessibilityMathMLElement::mathOverObject is incorrect
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: Accessibility (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Andres Gonzalez
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2021-09-27 06:49 PDT by Frédéric Wang (:fredw)
Modified: 2021-09-27 10:59 PDT (History)
10 users (show)

See Also:

Attachments
Patch (1.70 KB, patch)
2021-09-27 08:21 PDT, Andres Gonzalez 		no flags Details | Formatted Diff | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Frédéric Wang (:fredw) 2021-09-27 06:49:07 PDT 
For an munderover tag, we try to access children[2] but only check whether there are at least 2 children.
Comment 1 Radar WebKit Bug Importer 2021-09-27 06:49:19 PDT 
<rdar://problem/83571752>
Comment 2 Andres Gonzalez 2021-09-27 08:21:41 PDT 
Created attachment 439355 [details]
Patch
Comment 3 EWS 2021-09-27 10:59:54 PDT 
Committed r283127 (242185@main): <https://commits.webkit.org/242185@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 439355 [details].