[Webkit-unassigned] [Bug 196600] New: AX: Crash under WebCore::AccessibilityRenderObject::computeAccessibilityIsIgnored()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=196600

            Bug ID: 196600
           Summary: AX: Crash under
                    WebCore::AccessibilityRenderObject::computeAccessibili
                    tyIsIgnored()
           Product: WebKit
           Version: Other
          Hardware: All
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Accessibility
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: cfleizach at apple.com
                CC: webkit-bug-importer at group.apple.com

Crash detected during stress cycling

Exception Type:  EXC_BAD_ACCESS (SIGSEGV)
Exception Subtype: KERN_INVALID_ADDRESS at 0x0000000000000030
VM Region Info: 0x30 is not in any region.  Bytes before following region: 4295655376
      REGION TYPE                      START - END             [ VSIZE] PRT/MAX SHRMOD  REGION DETAIL
      UNUSED SPACE AT START
--->  
      __TEXT                 00000001000a8000-00000001000ac000 [   16K] r-x/r-x SM=COW  ...it.WebContent

Termination Signal: Segmentation fault: 11
Termination Reason: Namespace SIGNAL, Code 0xb
Terminating Process: exc handler [1346]
Triggered by Thread:  0

Thread 0 name:  Dispatch queue: com.apple.main-thread
Thread 0 Crashed:
0   WebCore                             0x00000001c44007a4 WebCore::AccessibilityRenderObject::computeAccessibilityIsIgnored() const + 184 (/BuildRoot/Library/Caches/com.apple.xbs/Sources/WebCore/WebCore-7607.2.2/rendering/RenderObject.h:932)
1   WebCore                             0x00000001c44007a4 WebCore::AccessibilityRenderObject::computeAccessibilityIsIgnored() const + 184 (./accessibility/AccessibilityRenderObject.cpp:1197)
2   WebCore                             0x00000001c43fb460 WebCore::AccessibilityObject::accessibilityIsIgnored() const + 92 (./accessibility/AccessibilityObject.cpp:3342)
3   WebCore                             0x00000001c43d1274 WebCore::AXObjectCache::getOrCreate(WebCore::RenderObject*) + 784 (./accessibility/AXObjectCache.cpp:637)
4   WebCore                             0x00000001c43d4110 WebCore::AXObjectCache::frameLoadingEventNotification(WebCore::Frame*, WebCore::AXObjectCache::AXLoadingEvent) + 48 (./accessibility/AXObjectCache.cpp:1352)
5   WebCore                             0x00000001c4a3f8bc WebCore::FrameLoader::prepareForLoadStart() + 292 (./loader/FrameLoader.cpp:1229)
6   WebCore                             0x00000001c4a55390 WTF::Function<void ()>::CallableWrapper<WebCore::FrameLoader::continueLoadAfterNavigationPolicy(WebCore::ResourceRequest const&, WebCore::FormState*, WebCore::NavigationPolicyDecision, WebCore::AllowNavigationToInvalidURL)::$_11>::call() + 52 (./loader/FrameLoader.cpp:3432)
7   WebCore                             0x00000001c4a42a08 WebCore::FrameLoader::continueLoadAfterNavigationPolicy(WebCore::ResourceRequest const&, WebCore::FormState*, WebCore::NavigationPolicyDecision, WebCore::AllowNavigationToInvalidURL) + 1788 (/BuildRoot/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS12.3.Internal.sdk/usr/local/include/wtf/Function.h:56)
8   WebCore                             0x00000001c4a5493c WTF::Function<void (WebCore::ResourceRequest&&, WTF::WeakPtr<WebCore::FormState>&&, WebCore::NavigationPolicyDecision)>::CallableWrapper<WebCore::FrameLoader::loadWithDocumentLoader(WebCore::DocumentLoader*, WebCore::FrameLoadType, WTF::RefPtr<WebCore::FormState, WTF::DumbPtrTraits<WebCore::FormState> >&&, WebCore::AllowNavigationToInvalidURL, WebCore::ShouldTreatAsContinuingLoad, WTF::CompletionHandler<void ()>&&)::$_8>::call(WebCore::ResourceRequest&&, WTF::WeakPtr<WebCore::FormState>&&, WebCore::NavigationPolicyDecision) + 48 (./loader/FrameLoader.cpp:1639)

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190404/944fb697/attachment-0001.html>