Bug 241936 – AX: CrashTracer: com.apple.WebKit.WebContent at com.apple.WebCore: WebCore::AccessibilityTableCell::ariaOwnedByParent const

• Status: RESOLVED
• Resolution: FIXED
• Component: Accessibility

[Andres Gonzalez]

Thread 0 Crashed::   Dispatch queue: com.apple.main-thread
0   com.apple.WebCore                        0x1b663c0d0        WebCore::AccessibilityTableCell::ariaOwnedByParent() const + 100 (/AppleInternal/Library/BuildRoots/b735fe89-ea95-11ec-a9bc-3e2aa58faa6a/Library/Caches/com.apple.xbs/Sources/WebCore/Source/WebCore/./accessibility/AccessibilityTableCell.cpp:299)
1   com.apple.WebCore                        0x1b663c0bc        WebCore::AccessibilityTableCell::ariaOwnedByParent() const + 80 (/AppleInternal/Library/BuildRoots/b735fe89-ea95-11ec-a9bc-3e2aa58faa6a/Library/Caches/com.apple.xbs/Sources/WebCore/Source/WebCore/accessibility/AccessibilityObjectInterface.h:1091)
2   com.apple.WebCore                        0x1b65d9998        WebCore::AccessibilityARIAGridCell::parentTable() const + 24 (/AppleInternal/Library/BuildRoots/b735fe89-ea95-11ec-a9bc-3e2aa58faa6a/Library/Caches/com.apple.xbs/Sources/WebCore/Source/WebCore/./accessibility/AccessibilityTableCell.cpp:306)
3   com.apple.WebCore                        0x1b663ad3c        WebCore::AccessibilityTableCell::computeAccessibilityIsIgnored() const + 404 (/AppleInternal/Library/BuildRoots/b735fe89-ea95-11ec-a9bc-3e2aa58faa6a/Library/Caches/com.apple.xbs/Sources/WebCore/Source/WebCore/./accessibility/AccessibilityTableCell.cpp:121)
4   com.apple.WebCore                        0x1b66113c8        WebCore::AccessibilityObject::accessibilityIsIgnored() const + 424 (/AppleInternal/Library/BuildRoots/b735fe89-ea95-11ec-a9bc-3e2aa58faa6a/Library/Caches/com.apple.xbs/Sources/WebCore/Source/WebCore/./accessibility/AccessibilityObject.cpp:3762)
5   com.apple.WebCore                        0x1b65c6fe4        WebCore::AXObjectCache::handleChildrenChanged(WebCore::AccessibilityObject&) + 508 (/AppleInternal/Library/BuildRoots/b735fe89-ea95-11ec-a9bc-3e2aa58faa6a/Library/Caches/com.apple.xbs/Sources/WebCore/Source/WebCore/./accessibility/AccessibilityObject.cpp:3623)
6   com.apple.WebCore                        0x1b65d5e14        WebCore::AXObjectCache::performDeferredCacheUpdate() + 1028 (/AppleInternal/Library/BuildRoots/b735fe89-ea95-11ec-a9bc-3e2aa58faa6a/Library/Caches/com.apple.xbs/Sources/WebCore/Source/WebCore/./accessibility/AXObjectCache.cpp:3345)
7   com.apple.WebCore                        0x1b562be7c        WebCore::FrameView::performPostLayoutTasks() + 1696 (/AppleInternal/Library/BuildRoots/b735fe89-ea95-11ec-a9bc-3e2aa58faa6a/Library/Caches/com.apple.xbs/Sources/WebCore/Source/WebCore/./page/FrameView.cpp:3456)
8   com.apple.WebCore                        0x1b70748b8        WebCore::FrameViewLayoutContext::layout() + 1184 (/AppleInternal/Library/BuildRoots/b735fe89-ea95-11ec-a9bc-3e2aa58faa6a/Library/Caches/com.apple.xbs/Sources/WebCore/Source/WebCore/./page/FrameViewLayoutContext.cpp:310)
9   com.apple.WebCore                        0x1b56882c0        WebCore::Document::updateLayout() + 772 (/AppleInternal/Library/BuildRoots/b735fe89-ea95-11ec-a9bc-3e2aa58faa6a/Library/Caches/com.apple.xbs/Sources/WebCore/Source/WebCore/./dom/Document.cpp:2262)
10  com.apple.WebCore                        0x1b69b21c8        WebCore::Document::updateLayoutIgnorePendingStylesheets(WebCore::Document::RunPostLayoutTasks) + 72 (/AppleInternal/Library/BuildRoots/b735fe89-ea95-11ec-a9bc-3e2aa58faa6a/Library/Caches/com.apple.xbs/Sources/WebCore/Source/WebCore/./dom/Document.cpp:2286)
11  com.apple.WebCore                        0x1b56c6050        WebCore::Element::getBoundingClientRect() + 52 (/AppleInternal/Library/BuildRoots/b735fe89-ea95-11ec-a9bc-3e2aa58faa6a/Library/Caches/com.apple.xbs/Sources/WebCore/Source/WebCore/./dom/Element.cpp:1768)
12  com.apple.WebCore                        0x1b5bd8c14        WebCore::jsElementPrototypeFunction_getBoundingClientRect(JSC::JSGlobalObject*, JSC::CallFrame*) + 140 (/AppleInternal/Library/BuildRoots/b735fe89-ea95-11ec-a9bc-3e2aa58faa6a/Library/Caches/com.apple.xbs/Binaries/WebCore/install/Symbols/BuiltProducts/DerivedSources/WebCore/JSElement.cpp:3859)

[Radar WebKit Bug Importer]

<rdar://problem/95809097>

[Andres Gonzalez]

rdar://95250417

[Radar WebKit Bug Importer]

<rdar://problem/95809896>

[Andres Gonzalez]

Created attachment 460456 [details]
Patch

[Andres Gonzalez]

rdar://95250417

[chris fleizach]

Comment on attachment 460456 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=460456&action=review

> COMMIT_MESSAGE:7
> +AXObjectCache::objectsForIDs was returning a vectorVector<RefPtr> that could contain nullptrs. This patch ensures that all items in the vector are not null.

vectorVector

[Andres Gonzalez]

Created attachment 460457 [details]
Patch

[Andres Gonzalez]

(In reply to chris fleizach from comment #6)
> Comment on attachment 460456 [details]
> Patch
> 
> View in context:
> https://bugs.webkit.org/attachment.cgi?id=460456&action=review
> 
> > COMMIT_MESSAGE:7
> > +AXObjectCache::objectsForIDs was returning a vectorVector<RefPtr> that could contain nullptrs. This patch ensures that all items in the vector are not null.
> 
> vectorVector

Fixed.

[EWS]

Committed 251816@main (d9b9019250ec): <https://commits.webkit.org/251816@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 460457 [details].