[Webkit-unassigned] [Bug 106106] REGRESSION: [Mac] Intermittent crashes in AXObjectCache::notificationPostTimerFired

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=106106





--- Comment #7 from Ryosuke Niwa <rniwa at webkit.org>  2013-01-05 20:41:27 PST ---
The problem is that layout code can post notifications while we're going through the notification list:

0   com.apple.WebCore                 0x000000010630eeee WebCore::AXObjectCache::postNotification(WebCore::AccessibilityObject*, WebCore::Document*, WebCore::AXObjectCache::AXNotification, bool, WebCore::PostType) + 254 (AXObjectCache.cpp:676)
1   com.apple.WebCore                 0x000000010630f392 WebCore::AXObjectCache::postNotification(WebCore::RenderObject*, WebCore::AXObjectCache::AXNotification, bool, WebCore::PostType) + 274 (AXObjectCache.cpp:643)
2   com.apple.WebCore                 0x0000000106aaf9ab WebCore::FrameView::layout(bool) + 3739 (FrameView.cpp:1247)
3   com.apple.WebCore                 0x0000000106757abf WebCore::Document::updateLayout() + 271 (Document.cpp:1895)
4   com.apple.WebCore                 0x0000000106757b95 WebCore::Document::updateLayoutIgnorePendingStylesheets() + 197 (Document.cpp:1928)
5   com.apple.WebCore                 0x000000010631fc34 WebCore::AccessibilityObject::updateBackingStore() + 52 (AccessibilityObject.cpp:1123)
6   com.apple.WebCore                 0x0000000107cbf7f9 -[WebAccessibilityObjectWrapper updateObjectBackingStore] + 121 (WebAccessibilityObjectWrapper.mm:398)
7   com.apple.WebCore                 0x0000000107ccd53b -[WebAccessibilityObjectWrapper accessibilityIsIgnored] + 43 (WebAccessibilityObjectWrapper.mm:2744)
8   com.apple.WebCore                 0x000000010643672a WebCore::AXObjectCache::postPlatformNotification(WebCore::AccessibilityObject*, WebCore::AXObjectCache::AXNotification) + 426 (AXObjectCacheMac.mm:126)
9   com.apple.WebCore                 0x000000010630c631 WebCore::AXObjectCache::notificationPostTimerFired(WebCore::Timer<WebCore::AXObjectCache>*) + 465 (AXObjectCache.cpp:606)
10  com.apple.WebCore                 0x0000000106357923 WebCore::Timer<WebCore::AXObjectCache>::fired() + 115 (Timer.h:106)
11  com.apple.WebCore                 0x0000000107c78959 WebCore::ThreadTimers::sharedTimerFiredInternal() + 297 (ThreadTimers.cpp:119)
12  com.apple.WebCore                 0x0000000107c786e9 WebCore::ThreadTimers::sharedTimerFired() + 25 (ThreadTimers.cpp:94)
13  com.apple.WebCore                 0x00000001079a7093 _ZN7WebCoreL10timerFiredEP16__CFRunLoopTimerPv + 67 (SharedTimerMac.mm:167)
14  com.apple.CoreFoundation          0x00007fff89d63934 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ + 20
15  com.apple.CoreFoundation          0x00007fff89d63486 __CFRunLoopDoTimer + 534
16  com.apple.CoreFoundation          0x00007fff89d43e11 __CFRunLoopRun + 1617
17  com.apple.CoreFoundation          0x00007fff89d43486 CFRunLoopRunSpecific + 230
18  com.apple.Foundation              0x00007fff8ba22f7b -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 267
19  DumpRenderTree                    0x00000001049f0549 _ZL7runTestRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE + 5017

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.