[Webkit-unassigned] [Bug 138727] New: AX: [ATK] Crash getting the orientation of a MenuListOption after the MenuList was removed from the document
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Thu Nov 13 21:37:35 PST 2014
https://bugs.webkit.org/show_bug.cgi?id=138727
Bug ID: 138727
Summary: AX: [ATK] Crash getting the orientation of a
MenuListOption after the MenuList was removed from the
document
Classification: Unclassified
Product: WebKit
Version: 528+ (Nightly build)
Hardware: All
OS: All
Status: NEW
Severity: Normal
Priority: P2
Component: Accessibility
Assignee: webkit-unassigned at lists.webkit.org
Reporter: jdiggs at igalia.com
CC: webkit-bug-importer at group.apple.com
AccessibilityMenuListOption::elementRect() returns the value of the grandparent MenuList. If we have an existing MenuListOption and the widget backing MenuList was just removed from the document, calling AccessibilityMenuListOption::elementRect() will crash the web process.
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20141114/262df907/attachment-0002.html>
More information about the webkit-unassigned
mailing list