[Webkit-unassigned] [Bug 75279] New: Crash in the WebKit accessibility code while attempting to retrieve the title UI element.

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=75279

           Summary: Crash in the WebKit accessibility code while
                    attempting to retrieve the title UI element.
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Accessibility
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: ananta at chromium.org
                CC: cfleizach at apple.com, rniwa at webkit.org


We have been seeing this crash in Chromium with accessibility enabled. The chromium bug is here
http://crbug.com/108508(Logged against Chromeframe tests which enable webkit accessibility).

Debugging revealed that the crash occurs in the AccessibilityRenderObject::titleUIElement method
because of a NULL node being returned by the underlying RenderObject. Debugging this function
revealed that the RenderObject can return a NULL node pointer at times(if it is anonymous). 

We should check for a NULL node here.
Will upload a patch in a bit

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.