[Webkit-unassigned] [Bug 208648] New: REGRESSION: (r257760?) [ Mac wk2 Debug ] ASSERTION FAILED: child->parentObject() == this in WebCore::AccessibilityObject::insertChild

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=208648

            Bug ID: 208648
           Summary: REGRESSION: (r257760?) [ Mac wk2 Debug ] ASSERTION
                    FAILED: child->parentObject() == this in
                    WebCore::AccessibilityObject::insertChild
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Macintosh
                OS: macOS 10.15
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: HTML Editing
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: Lawrence.j at apple.com
                CC: wenson_hsieh at apple.com

Created attachment 392587

  --> https://bugs.webkit.org/attachment.cgi?id=392587&action=review

append-node-under-document-crash-log

editing/execCommand/append-node-under-document.html

Description:
This test is flaky crashing on Mac wk2 Debug. It appears to have a regression point of r257760.

History:
https://results.webkit.org/?suite=layout-tests&test=editing%2FexecCommand%2Fappend-node-under-document.html&style=debug&flavor=wk2&flavor=gpuprocess&platform=mac&limit=50000

Crash log attached;
ASSERTION FAILED: child->parentObject() == this
./accessibility/AccessibilityObject.cpp(496) : virtual void WebCore::AccessibilityObject::insertChild(WebCore::AXCoreObject *, unsigned int)
1   0x23188db29 WTFCrash
2   0x214d7bdeb WTFCrashWithInfo(int, char const*, char const*, int)
3   0x216f7e1a5 WebCore::AccessibilityObject::insertChild(WebCore::AXCoreObject*, unsigned int)

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200305/8f25deaf/attachment.htm>