[Webkit-unassigned] [Bug 106073] New: [Mac] Intermittent crash in WTR::AccessibilityUIElement::isEqual

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=106073

           Summary: [Mac] Intermittent crash in
                    WTR::AccessibilityUIElement::isEqual
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Keywords: NeedsRadar
          Severity: Normal
          Priority: P2
         Component: Accessibility
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: rniwa at webkit.org
                CC: ap at webkit.org, cfleizach at apple.com, enrica at apple.com,
                    webkit-bug-importer at group.apple.com


Some tests in sputnik/Conformance are intermittently crashing in AccessibilityUIElement::isEqual.

Here’s one example:
http://build.webkit.org/results/Apple%20MountainLion%20Release%20WK2%20(Tests)/r138770%20(4442)/results.html

There are several tests that crash with a similar stack trace:
0   WebKitTestRunnerInjectedBundle    0x00000001064415ba WTR::AccessibilityUIElement::isEqual(WTR::AccessibilityUIElement*) + 8 (AccessibilityUIElement.h:76)
1   WebKitTestRunnerInjectedBundle    0x0000000106447b45 WTR::JSAccessibilityUIElement::isEqual(OpaqueJSContext const*, OpaqueJSValue*, OpaqueJSValue*, unsigned long, OpaqueJSValue const* const*, OpaqueJSValue const**) + 65 (JSAccessibilityUIElement.cpp:203)
2   com.apple.JavaScriptCore          0x00000001022b9b4f JSC::JSCallbackFunction::call(JSC::ExecState*) + 431 (JSCallbackFunction.cpp:72)
3   com.apple.JavaScriptCore          0x00000001023d330e JSC::LLInt::setUpCall(JSC::ExecState*, JSC::Instruction*, JSC::CodeSpecializationKind, JSC::JSValue, JSC::LLIntCallLinkInfo*) + 206 (LLIntSlowPaths.cpp:1362)
4   com.apple.JavaScriptCore          0x00000001023d76db llint_op_call + 169
5   com.apple.JavaScriptCore          0x0000000102266304 JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 548 (JSValueInlines.h:360)
6   com.apple.JavaScriptCore          0x000000010219e345 JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 69 (CallData.cpp:39)
7   com.apple.JavaScriptCore          0x00000001022e1961 JSObjectCallAsFunction + 545 (JSObjectRef.cpp:444)
8   WebKitTestRunnerInjectedBundle    0x000000010644b140 -[AccessibilityNotificationHandler _notificationReceived:] + 385 (AccessibilityNotificationHandler.mm:136)
9   com.apple.CoreFoundation          0x00007fff8d48247a _CFXNotificationPost + 2554
10  com.apple.Foundation              0x00007fff8846c846 -[NSNotificationCenter postNotificationName:object:userInfo:] + 64
11  com.apple.WebCore                 0x00000001026a8837 WebCore::AXObjectCache::notificationPostTimerFired(WebCore::Timer<WebCore::AXObjectCache>*) + 71 (AXObjectCache.cpp:598)
12  com.apple.WebCore                 0x000000010336836f WebCore::ThreadTimers::sharedTimerFiredInternal() + 159 (ThreadTimers.cpp:119)
13  com.apple.WebCore                 0x00000001031f30a3 WebCore::timerFired(__CFRunLoopTimer*, void*) + 51 (SharedTimerMac.mm:167)
14  com.apple.CoreFoundation          0x00007fff8d48cda4 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ + 20
15  com.apple.CoreFoundation          0x00007fff8d48c8bd __CFRunLoopDoTimer + 557
16  com.apple.CoreFoundation          0x00007fff8d472099 __CFRunLoopRun + 1513
17  com.apple.CoreFoundation          0x00007fff8d4716b2 CFRunLoopRunSpecific + 290
18  com.apple.HIToolbox               0x00007fff8c56e0a4 RunCurrentEventLoopInMode + 209
19  com.apple.HIToolbox               0x00007fff8c56de42 ReceiveNextEventCommon + 356
20  com.apple.HIToolbox               0x00007fff8c56dcd3 BlockUntilNextEventMatchingListInMode + 62
21  com.apple.AppKit                  0x00007fff85d25613 _DPSNextEvent + 685
22  com.apple.AppKit                  0x00007fff85d24ed2 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 128
23  com.apple.AppKit                  0x00007fff85d1c283 -[NSApplication run] + 517
24  com.apple.WebCore                 0x00000001031a1543 WebCore::RunLoop::run() + 67 (RunLoopMac.mm:36)
25  com.apple.WebKit2                 0x0000000101c9fe8c WebKit::WebProcessMain(WebKit::CommandLine const&) + 3485 (RefPtr.h:56)
26  com.apple.WebKit2                 0x0000000101c4317c WebKitMain + 324 (WebKitMain.cpp:58)
27  com.apple.WebProcess              0x0000000101b5fe7b main + 214
28  libdyld.dylib                     0x00007fff843aa7e1 start + 1

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.