[Webkit-unassigned] [Bug 131719] New: AX: Accessing a table cell with an invalid column header crashes

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=131719

           Summary: AX: Accessing a table cell with an invalid column
                    header crashes
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Accessibility
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: cfleizach at apple.com
                CC: webkit-bug-importer at group.apple.com


* thread #1: tid = 0x95b3a, 0x0000000113f5dd75 WebCore`WebCore::AccessibilityTableCell::columnHeaders(this=0x00007ff91a48cd60, headers=0x00007fff53bdb1c8) + 389 at AccessibilityTableCell.cpp:184, queue = 'com.apple.main-thread', stop reason = EXC_BAD_ACCESS (code=1, address=0x0)
    frame #0: 0x0000000113f5dd75 WebCore`WebCore::AccessibilityTableCell::columnHeaders(this=0x00007ff91a48cd60, headers=0x00007fff53bdb1c8) + 389 at AccessibilityTableCell.cpp:184
   181                 continue;
   182     
   183             std::pair<unsigned, unsigned> childRowRange;
-> 184             tableCell->rowIndexRange(childRowRange);
   185                 
   186             const AtomicString& scope = tableCell->getAttribute(scopeAttr);
   187             if (scope == "col" || tableCell->isTableHeaderCell())

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.