[Webkit-unassigned] [Bug 112523] Crash in AXObjectCache::notificationPostTimerFired()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=112523





--- Comment #3 from Simon Fraser (smfr) <simon.fraser at apple.com>  2013-03-17 16:28:08 PST ---
void Document::clearAXObjectCache()
{
    // Clear the cache member variable before calling delete because attempts
    // are made to access it during destruction.
    topDocument()->m_axObjectCache.release();
}

Two things odd:
1. Why might a subframe nuke the accessibility cache on the top document?
Is this because we're unable to remove just a subframes accessibility objects from the cache, or a mistake?
2. .release() should be .clear()

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.