Bug 243574 - AX ITM: CrashTracer: com.apple.WebKit.WebContent at com.apple.WebCore: WebCore::AXIsolatedTree::updateChildren
Summary: AX ITM: CrashTracer: com.apple.WebKit.WebContent at com.apple.WebCore: WebCor...
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: Accessibility (show other bugs)
Version: WebKit Nightly Build
Hardware: All All
: P2 Normal
Assignee: Andres Gonzalez
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2022-08-04 19:04 PDT by Andres Gonzalez
Modified: 2022-08-06 09:12 PDT (History)
11 users (show)

See Also:

Attachments
Patch (11.46 KB, patch)
2022-08-04 20:03 PDT, Andres Gonzalez 		no flags Details | Formatted Diff | Diff
Patch (11.43 KB, patch)
2022-08-05 11:16 PDT, Andres Gonzalez 		no flags Details | Formatted Diff | Diff
Show Obsolete (1) View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Andres Gonzalez 2022-08-04 19:04:24 PDT 
rdar://97880730
Comment 1 Radar WebKit Bug Importer 2022-08-04 19:04:35 PDT 
<rdar://problem/98162152>
Comment 2 Andres Gonzalez 2022-08-04 19:20:19 PDT 
      11 __pthread_kill
        11 pthread_kill
          11 abort
            11 abort_message
              11 __cxa_pure_virtual
         ==> 19 WebCore::AXIsolatedTree::updateChildren(WebCore::AXCoreObject&, WebCore::AXIsolatedTree::ResolveNodeChanges) <==
                  19 WebCore::AXIsolatedTree::updateChildren(WebCore::AXCoreObject&, WebCore::AXIsolatedTree::ResolveNodeChanges)
                    19 WebCore::AXObjectCache::updateIsolatedTree(WTF::Vector<std::__1::pair<WTF::RefPtr<WebCore::AXCoreObject, WTF::RawPtrTraits<WebCore::AXCoreObject>, WTF::DefaultRefDerefTraits<WebCore::AXCoreObject> >, WebCore::AXObjectCache::AXNotification>, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc> const&)
                      19 WebCore::AXObjectCache::updateIsolatedTree(WebCore::AXCoreObject&, WebCore::AXObjectCache::AXNotification)
                        19 WebCore::AXObjectCache::handleChildrenChanged(WebCore::AccessibilityObject&)
                          19 WebCore::AXObjectCache::handleAttributeChange(WebCore::Element*, WebCore::QualifiedName const&)
                            19 WebCore::Element::attributeChanged(WebCore::QualifiedName const&, WTF::AtomString const&, WTF::AtomString const&, WebCore::Element::AttributeModificationReason)
                              12
Comment 3 Radar WebKit Bug Importer 2022-08-04 19:20:47 PDT 
<rdar://problem/98162747>
Comment 4 Andres Gonzalez 2022-08-04 19:22:13 PDT 
rdar://97880730
Comment 5 Radar WebKit Bug Importer 2022-08-04 19:22:22 PDT 
<rdar://problem/98162795>
Comment 6 Andres Gonzalez 2022-08-04 20:03:32 PDT 
Created attachment 461415 [details]
Patch
Comment 7 Darin Adler 2022-08-05 11:06:22 PDT 
Comment on attachment 461415 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=461415&action=review

> Source/WebCore/accessibility/AccessibilityMenuListPopup.cpp:156
> +    RefPtr<AccessibilityObject> child = downcast<AccessibilityObject>(m_children[optionIndex].get());

Should just write RefPtr instead of RefPtr<AccessibilityObject>.
Comment 8 Andres Gonzalez 2022-08-05 11:16:25 PDT 
Created attachment 461427 [details]
Patch
Comment 9 EWS 2022-08-06 09:12:42 PDT 
Committed 253180@main (9a9375a00e57): <https://commits.webkit.org/253180@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 461427 [details].