[Webkit-unassigned] [Bug 184366] crash when destroying a RenderObject with orca running

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Apr 6 16:06:36 PDT 2018


https://bugs.webkit.org/show_bug.cgi?id=184366

--- Comment #2 from Mike Gorse <mgorse at suse.com> ---
It's a regression caused by the fix for bug 182513. As a test, I tried backing out the patch, and I no longer get the crash. The change to the check in AccessibilityObject.cpp seems intended to be more explicit, but apparently it misses some condition that the old check caught.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20180406/ccd9e5a1/attachment-0002.html>


More information about the webkit-unassigned mailing list