Bug 271731 – AX: Crash in AXTextMarker constructor.

• Status: RESOLVED
• Resolution: FIXED
• Component: Accessibility

[Andres Gonzalez]

* frame #0: 0x0000000329cce424 WebCore`WTFCrashWithInfo(line=649, file="/Users/ag/s/web/OpenSource/WebKitBuild/Debug/usr/local/include/wtf/HashTable.h", function="void WTF::HashTable<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::KeyValuePair<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::WeakPtr<WebCore::AXObjectCache>>, WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::WeakPtr<WebCore::AXObjectCache>>>, WTF::DefaultHash<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashMap<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::WeakPtr<WebCore::AXObjectCache>>::KeyValuePairTraits, WTF::HashTraits<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>>::checkKey(const T &) [Key = WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, Value = WTF::KeyValuePair<WTF::ObjectIdentifierGeneric<WebCore::AX"..., counter=75) at Assertions.h:837:5
    frame #1: 0x00000003299c2430 WebCore`void WTF::HashTable<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::KeyValuePair<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>>, WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>>>, WTF::DefaultHash<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashMap<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>, WTF::DefaultHash<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashTraits<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashTraits<WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>>, WTF::HashTableTraits>::KeyValuePairTraits, WTF::HashTraits<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>>::checkKey<WTF::HashMapTranslatorAdapter<WTF::HashMap<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>, WTF::DefaultHash<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashTraits<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashTraits<WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>>, WTF::HashTableTraits>::KeyValuePairTraits, WTF::IdentityHashTranslator<WTF::HashMap<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>, WTF::DefaultHash<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashTraits<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashTraits<WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>>, WTF::HashTableTraits>::KeyValuePairTraits, WTF::DefaultHash<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>>>, WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>(this=0x000000032f5efcb0, key=0x000000016d981f40) at HashTable.h:649:9
    frame #2: 0x00000003299c22a0 WebCore`WTF::KeyValuePair<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>>* WTF::HashTable<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::KeyValuePair<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>>, WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>>>, WTF::DefaultHash<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashMap<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>, WTF::DefaultHash<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashTraits<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashTraits<WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>>, WTF::HashTableTraits>::KeyValuePairTraits, WTF::HashTraits<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>>::inlineLookup<WTF::HashMapTranslatorAdapter<WTF::HashMap<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>, WTF::DefaultHash<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashTraits<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashTraits<WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>>, WTF::HashTableTraits>::KeyValuePairTraits, WTF::IdentityHashTranslator<WTF::HashMap<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>, WTF::DefaultHash<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashTraits<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashTraits<WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>>, WTF::HashTableTraits>::KeyValuePairTraits, WTF::DefaultHash<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>>>, WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>(this=0x000000032f5efcb0, key=0x000000016d981f40) at HashTable.h:671:9
    frame #3: 0x00000003299c21e0 WebCore`WTF::KeyValuePair<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>>* WTF::HashTable<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::KeyValuePair<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>>, WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>>>, WTF::DefaultHash<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashMap<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>, WTF::DefaultHash<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashTraits<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashTraits<WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>>, WTF::HashTableTraits>::KeyValuePairTraits, WTF::HashTraits<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>>::lookup<WTF::HashMapTranslatorAdapter<WTF::HashMap<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>, WTF::DefaultHash<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashTraits<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashTraits<WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>>, WTF::HashTableTraits>::KeyValuePairTraits, WTF::IdentityHashTranslator<WTF::HashMap<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>, WTF::DefaultHash<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashTraits<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashTraits<WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>>, WTF::HashTableTraits>::KeyValuePairTraits, WTF::DefaultHash<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>>>, WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>(this=0x000000032f5efcb0, key=0x000000016d981f40) at HashTable.h:663:16
    frame #4: 0x00000003299c2150 WebCore`WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>> WTF::HashMap<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>, WTF::DefaultHash<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashTraits<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashTraits<WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>>, WTF::HashTableTraits>::get<WTF::IdentityHashTranslator<WTF::HashMap<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>, WTF::DefaultHash<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashTraits<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashTraits<WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>>, WTF::HashTableTraits>::KeyValuePairTraits, WTF::DefaultHash<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>>, WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>(this=0x000000032f5efcb0, value=0x000000016d981f40) const at HashMap.h:363:63
    frame #5: 0x00000003299c1f00 WebCore`WTF::HashMap<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>, WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>, WTF::DefaultHash<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashTraits<WTF::ObjectIdentifierGeneric<WebCore::AXIDType, WTF::ObjectIdentifierMainThreadAccessTraits>>, WTF::HashTraits<WTF::WeakPtr<WebCore::AXObjectCache, WTF::DefaultWeakPtrImpl, WTF::RawPtrTraits<WTF::DefaultWeakPtrImpl>>>, WTF::HashTableTraits>::get(this=0x000000032f5efcb0, key=0x000000016d981f40) const at HashMap.h:489:12
    frame #6: 0x0000000329988d34 WebCore`WebCore::AXTreeStore<WebCore::AXObjectCache>::axObjectCacheForID(axID=WebCore::AXID @ 0x000000016d981f40) at AXTreeStore.h:154:26
    frame #7: 0x0000000329988b6c WebCore`WebCore::axTreeForID(axID=WebCore::AXID @ 0x000000016d981fa0) at AXTreeStore.h:205:12
    frame #8: 0x0000000329988960 WebCore`WebCore::AXTextMarker::setNodeIfNeeded(this=0x000000016d982130) const at AXTextMarker.cpp:117:54
    frame #9: 0x00000003271aa014 WebCore`WebCore::AXTextMarker::AXTextMarker(this=0x000000016d982130, platformData=0x0000000146e40570) at AXTextMarkerCocoa.mm:60:9
    frame #10: 0x00000003271aa080 WebCore`WebCore::AXTextMarker::AXTextMarker(this=0x000000016d982130, platformData=0x0000000146e40570) at AXTextMarkerCocoa.mm:39:1
    frame #11: 0x00000003271aa200 WebCore`WebCore::AXTextMarkerRange::AXTextMarkerRange(this=0x000000016d982238, textMarkerRangeRef=0x0000000146e4d860) at AXTextMarkerCocoa.mm:83:15
    frame #12: 0x00000003271aa2b4 WebCore`WebCore::AXTextMarkerRange::AXTextMarkerRange(this=0x000000016d982238, textMarkerRangeRef=0x0000000146e4d860) at AXTextMarkerCocoa.mm:74:1
    frame #13: 0x000000032d0b00c0 WebCore`-[WebAccessibilityObjectWrapper accessibilityAttributeValue:forParameter:]::$_65::operator(this=0x000000016da93968)() const at WebAccessibilityObjectWrapperMac.mm:3483:31
...

[Radar WebKit Bug Importer]

<rdar://problem/125441080>

[Andres Gonzalez]

Created attachment 470614 [details]
Patch

[EWS]

Committed 276722@main (87c7b11098ed): <https://commits.webkit.org/276722@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 470614 [details].