[Webkit-unassigned] [Bug 173540] [GTK] Layout Test imported/w3c/web-platform-tests/html/syntax/parsing/html5lib_tests1.html flaky crash

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=173540

--- Comment #6 from Fujii Hironori <Hironori.Fujii at sony.com> ---
Comment on attachment 326319
  --> https://bugs.webkit.org/attachment.cgi?id=326319
WIP patch

View in context: https://bugs.webkit.org/attachment.cgi?id=326319&action=review

> Source/WebCore/accessibility/AXObjectCache.cpp:119
> +    // ListHashSet::remove(const ValueType&) can't be used because item->m_deletionHasBegun would be true.

Too tricky. If a node is stored in ListHashSet<RefPtr<T>>, Node destructor never be called. If Node destructor is called, it means the instance is not stored in the ListHashSets. It doesn't need to remove this pointer within Node destructor.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20171109/b143c859/attachment.html>