[Webkit-unassigned] [Bug 175340] AX: crash at WebCore::AccessibilityObject::supportsARIALiveRegion() const + 24

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=175340

Nan Wang <n_wang at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #317793|0                           |1
        is obsolete|                            |

--- Comment #21 from Nan Wang <n_wang at apple.com> ---
Created attachment 317814

  --> https://bugs.webkit.org/attachment.cgi?id=317814&action=review

patch

Ok, I think this is problematic due to the accessibility set up. We rely on the CachedImage object to retrieve the corresponding AccessibilitySVGRoot when detaching. But since that's been cleared, the detaching was fail so that the AccessibilitySVGRoot object is still pointing to the RenderImage's ax render object as parent.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170810/40f57c85/attachment.html>