Bug 283070 – [GTK] web process crash when opening inspector in WebCore::AccessibilityAtspi::registerObject

• Status: NEW
• Component: Accessibility

1. press ctrl+shift+i or inspect element

nothing is printed in console/journal (besides the browser's own "web process crashed" message)

core dump:

```
(gdb) bt
#0  __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, no_tid=no_tid@entry=0)
    at pthread_kill.c:44
#1  0x00007ffa4189ae03 in __pthread_kill_internal (threadid=<optimized out>, signo=6) at pthread_kill.c:78
#2  0x00007ffa4184208e in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
#3  0x00007ffa41829882 in __GI_abort () at abort.c:79
#4  0x00007ffa4211800f in WTFCrashWithInfo () at WTF/Headers/wtf/Assertions.h:912
#5  0x00007ffa437fad1a in WebCore::AccessibilityAtspi::registerObject
    (this=<optimized out>, atspiObject=..., interfaces=...)
    at /buildstream/gnome/sdk/webkitgtk-6.0.bst/Source/WebCore/accessibility/atspi/AccessibilityAtspi.cpp:347
#6  0x00007ffa437ff786 in WebCore::AccessibilityObjectAtspi::registerObject (this=0x7ffa220088a0)
    at /buildstream/gnome/sdk/webkitgtk-6.0.bst/Source/WebCore/accessibility/atspi/AccessibilityObjectAtspi.cpp:496
#7  0x00007ffa437fbd3d in WebCore::AccessibilityObjectAtspi::path (this=0x7ffa220088a0)
    at /buildstream/gnome/sdk/webkitgtk-6.0.bst/Source/WebCore/accessibility/atspi/AccessibilityObjectAtspi.cpp:508
#8  WebCore::AccessibilityAtspi::parentChanged (this=<optimized out>, atspiObject=...)
    at /buildstream/gnome/sdk/webkitgtk-6.0.bst/Source/WebCore/accessibility/atspi/AccessibilityAtspi.cpp:421
#9  0x00007ffa437ffbc6 in WebCore::AccessibilityObjectAtspi::setParent
    (this=0x7ffa220088a0, atspiParent=std::optional = {...})
    at /buildstream/gnome/sdk/webkitgtk-6.0.bst/Source/WebCore/accessibility/atspi/AccessibilityObjectAtspi.cpp:536
--Type <RET> for more, q to quit, c to continue without paging--
#10 0x00007ffa437f6dda in WebCore::AXObjectCache::platformPerformDeferredCacheUpdate()::$_0::operator()(WebCore::AXCoreObject const&) const
    (axObject=..., this=<optimized out>) at /buildstream/gnome/sdk/webkitgtk-6.0.bst/Source/WebCore/accessibility/atspi/AXObjectCacheAtspi.cpp:55
#11 WebCore::AXObjectCache::platformPerformDeferredCacheUpdate (this=0x7ffa22173200)
    at /buildstream/gnome/sdk/webkitgtk-6.0.bst/Source/WebCore/accessibility/atspi/AXObjectCacheAtspi.cpp:64
#12 0x00007ffa437986d9 in WebCore::AXObjectCache::performDeferredCacheUpdate (this=0x7ffa22173200, forceLayout=<optimized out>)
    at /buildstream/gnome/sdk/webkitgtk-6.0.bst/Source/WebCore/accessibility/AXObjectCache.cpp:4344
#13 0x00007ffa444f9daf in WebCore::ThreadTimers::sharedTimerFiredInternal (this=0x7ffa220f08d0)
    at /buildstream/gnome/sdk/webkitgtk-6.0.bst/Source/WebCore/platform/ThreadTimers.cpp:128
#14 0x00007ffa410d9095 in WTF::RunLoop::TimerBase::TimerBase(WTF::Ref<WTF::RunLoop, WTF::RawPtrTraits<WTF::RunLoop>, WTF::DefaultRefDerefTraits<WTF::RunLoop> >&&)::$_0::operator()(void*) const (userData=0x7ffa467cb120 <WebCore::MainThreadSharedTimer::singleton()::instance+16>, this=<optimized out>)
    at /buildstream/gnome/sdk/webkitgtk-6.0.bst/Source/WTF/wtf/glib/RunLoopGLib.cpp:177
#15 WTF::RunLoop::TimerBase::TimerBase(WTF::Ref<WTF::RunLoop, WTF::RawPtrTraits<WTF::RunLoop>, WTF::DefaultRefDerefTraits<WTF::RunLoop> >&&)::$_0::__invoke(void*)
    (userData=0x7ffa467cb120 <WebCore::MainThreadSharedTimer::singleton()::instance+16>)
    at /buildstream/gnome/sdk/webkitgtk-6.0.bst/Source/WTF/wtf/glib/RunLoopGLib.cpp:169
#16 0x00007ffa410d8071 in WTF::RunLoop::$_0::operator()
    (source=0x55d51604e9e0, callback=0x7ffa410d9000 <WTF::RunLoop::TimerBase::TimerBase(WTF::Ref<WTF::RunLoop, WTF::RawPtrTraits<WTF::RunLoop>, WTF::DefaultRefDerefTraits<WTF::RunLoop> >&&)::$_0::__invoke(void*)>, userData=0x7ffa467cb120 <WebCore::MainThreadSharedTimer::singleton()::instance+16>, this=<optimized out>)
    at /buildstream/gnome/sdk/webkitgtk-6.0.bst/Source/WTF/wtf/glib/RunLoopGLib.cpp:53
#17 WTF::RunLoop::$_0::__invoke
    (source=0x55d51604e9e0, callback=0x7ffa410d9000 <WTF::RunLoop::TimerBase::TimerBase(WTF::Ref<WTF::RunLoop, WTF::RawPtrTraits<WTF::RunLoop>, WTF::DefaultRefDerefTraits<WTF::RunLoop> >&&)::$_0::__invoke(void*)>, userData=0x7ffa467cb120 <WebCore::MainThreadSharedTimer::singleton()::instance+16>)
    at /buildstream/gnome/sdk/webkitgtk-6.0.bst/Source/WTF/wtf/glib/RunLoopGLib.cpp:45
#18 0x00007ffa3d2a2477 in g_main_dispatch (context=context@entry=0x55d5160024b0) at ../glib/gmain.c:3361
#19 0x00007ffa3d2a4787 in g_main_context_dispatch_unlocked (context=0x55d5160024b0) at ../glib/gmain.c:4212
#20 g_main_context_iterate_unlocked (context=0x55d5160024b0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at ../glib/gmain.c:4277
#21 0x00007ffa3d2a5277 in g_main_loop_run (loop=0x55d515ffacd0) at ../glib/gmain.c:4479
#22 0x00007ffa410d86c2 in WTF::RunLoop::run () at /buildstream/gnome/sdk/webkitgtk-6.0.bst/Source/WTF/wtf/glib/RunLoopGLib.cpp:108
#23 0x00007ffa42ac986f in WebKit::AuxiliaryProcessMainBase<WebKit::WebProcess, true>::run (this=0x7ffc7be9c210, argc=<optimized out>, argv=<optimized out>)
    at /buildstream/gnome/sdk/webkitgtk-6.0.bst/Source/WebKit/Shared/AuxiliaryProcessMain.h:72
#24 WebKit::AuxiliaryProcessMain<WebKit::WebProcessMainGtk> (argc=<optimized out>, argv=<optimized out>)
    at /buildstream/gnome/sdk/webkitgtk-6.0.bst/Source/WebKit/Shared/AuxiliaryProcessMain.h:98
#25 WebKit::WebProcessMain (argc=4, argv=0x7ffc7be9c3a8) at /buildstream/gnome/sdk/webkitgtk-6.0.bst/Source/WebKit/WebProcess/gtk/WebProcessMainGtk.cpp:106
#26 0x00007ffa4182b188 in __libc_start_call_main (main=main@entry=0x55d4e1b0b150 <main(int, char**)>, argc=argc@entry=4, argv=argv@entry=0x7ffc7be9c3a8)
    at ../sysdeps/nptl/libc_start_call_main.h:58
#27 0x00007ffa4182b24b in __libc_start_main_impl
    (main=0x55d4e1b0b150 <main(int, char**)>, argc=4, argv=0x7ffc7be9c3a8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffc7be9c3--Type <RET> for more, q to quit, c to continue without paging--c
98) at ../csu/libc-start.c:360
#28 0x000055d4e1b0b085 in _start () at ../sysdeps/x86_64/start.S:115
(gdb)
```