[Webkit-unassigned] [Bug 112523] Crash in AXObjectCache::notificationPostTimerFired()
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Sun Mar 17 16:25:42 PDT 2013
https://bugs.webkit.org/show_bug.cgi?id=112523
--- Comment #3 from Simon Fraser (smfr) <simon.fraser at apple.com> 2013-03-17 16:28:08 PST ---
void Document::clearAXObjectCache()
{
// Clear the cache member variable before calling delete because attempts
// are made to access it during destruction.
topDocument()->m_axObjectCache.release();
}
Two things odd:
1. Why might a subframe nuke the accessibility cache on the top document?
Is this because we're unable to remove just a subframes accessibility objects from the cache, or a mistake?
2. .release() should be .clear()
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list