[Webkit-unassigned] [Bug 96932] [GTK] [Stable] Infinite recursion in WebCore::AXObjectCache::getOrCreate

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Sep 20 13:26:15 PDT 2012


https://bugs.webkit.org/show_bug.cgi?id=96932





--- Comment #8 from Joanmarie Diggs (irc: joanie) <jdiggs at igalia.com>  2012-09-20 13:26:45 PST ---
(In reply to comment #6)
> It's always good to make tests as simple and minimal as possible, so please consider this alternate test:
> 
> <html>
> </body>
> 
> <div>
>     The presence of remapped ARIA objects should not crash the test harness.
>     <a role="option"></a>
> </div>
> 
> <script>
>     if (window.testRunner)
>         window.testRunner.dumpAsText();
>     document.body.focus();
> </script>
> 
> </body>
> </html>

Does that reliably crash for you? I tried all sorts of simple ways to make the crash occur 100% of the time, but could not:

* Just loading the test and giving the body focus
* Synthesizing a click on the various elements
* Directly accessing a specific accessible (and I tried them all)

The reason I went with a full hierarchy dump is that the one way I can reliably repro the crash outside of the test harness is to view the page and drill down the accessible tree in Accerciser. So that is what I did. For me the attached test is the ONLY thing which will crash 100% of the time.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list