[Webkit-unassigned] [Bug 120318] New: AX: Random crashes when navigating in iFrames with VoiceOver

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=120318

           Summary: AX: Random crashes when navigating in iFrames with
                    VoiceOver
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Keywords: InRadar
          Severity: Normal
          Priority: P2
         Component: Accessibility
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: cfleizach at apple.com
                CC: webkit-bug-importer at group.apple.com


Summary: Safari sometimes crashes when navigating content contained within an iframe.

Steps to Reproduce: 1. Visit http://fyve.de.
2. Click the "My Fave" link.
3. The login form appears in an iframe. Navigate left and right through this iframe a couple of times.

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebCore                 0x00007fff86c284f8 WebCore::Position::Position(WTF::PassRefPtr<WebCore::Node>, WebCore::Position::LegacyEditingOffset) + 40
1   com.apple.WebCore                 0x00007fff866e16c6 WebCore::AXObjectCache::visiblePositionForTextMarkerData(WebCore::TextMarkerData&) + 134
2   com.apple.WebCore                 0x00007fff86dedd2e -[WebAccessibilityObjectWrapper visiblePositionForTextMarker:] + 126
3   com.apple.WebCore                 0x00007fff86dfb08d -[WebAccessibilityObjectWrapper accessibilityAttributeValue:forParameter:] + 9293
4   com.apple.AppKit                  0x00007fff8864490e CopyParameterizedAttributeValue + 328
5   com.apple.HIServices              0x00007fff891a2d2d _AXXMIGCopyParameterizedAttributeValue + 265
6   com.apple.HIServices              0x00007fff891aa510 _XCopyParameterizedAttributeValue + 576
7   com.apple.HIServices              0x00007fff89187f4e mshMIGPerform + 443
8   com.apple.CoreFoundation          0x00007fff8c52a2d9 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE1_PERFORM_FUNCTION__ + 41
9   com.apple.CoreFoundation          0x00007fff8c52a019 __CFRunLoopDoSource1 + 153
10  com.apple.CoreFoundation          0x00007fff8c55d19f __CFRunLoopRun + 1775
11  com.apple.CoreFoundation          0x00007fff8c55c6b2 CFRunLoopRunSpecific + 290
12  com.apple.HIToolbox               0x00007fff91beb0a4 RunCurrentEventLoopInMode + 209
13  com.apple.HIToolbox               0x00007fff91beae42 ReceiveNextEventCommon + 356
14  com.apple.HIToolbox               0x00007fff91beacd3 BlockUntilNextEventMatchingListInMode + 62
15  com.apple.AppKit                  0x00007fff88410613 _DPSNextEvent + 685
16  com.apple.AppKit                  0x00007fff8840fed2 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 128
17  com.apple.AppKit                  0x00007fff88407283 -[NSApplication run] + 517
18  com.apple.WebCore                 0x00007fff86cc3e0f WebCore::RunLoop::run() + 63
19  com.apple.WebKit2                 0x00007fff8f3d6c8a WebKit::WebProcessMain(WebKit::CommandLine const&) + 2586
20  com.apple.WebKit2                 0x00007fff8f39e5bd WebKitMain + 285
21  com.apple.WebProcess              0x00000001024ace7b 0x1024ac000 + 3707
22  libdyld.dylib                     0x00007fff90cea7e1 start + 1

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.