[Webkit-unassigned] [Bug 225677] New: AX: Crash at WebCore::Document::updateLayout

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=225677

            Bug ID: 225677
           Summary: AX: Crash at WebCore::Document::updateLayout
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: All
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Accessibility
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: cfleizach at apple.com
                CC: webkit-bug-importer at group.apple.com

50 WebCore: WTFCrashWithInfo(int, char const*, char const*, int)
        50 WebCore: WebCore::Document::updateLayout()
   ==> 50 WebCore: WebCore::AccessibilityObject::updateBackingStore() <==
            50 WebCore: -[WebAccessibilityObjectWrapperBase updateObjectBackingStore]
              50 WebCore: -[WebAccessibilityObjectWrapper accessibilityIsIgnored]
                50 AppKit: __NSAccessibilityEntryPointIsAccessibilityElement_block_invoke
                  50 AppKit: NSAccessibilityPerformEntryPointBOOL
                    50 AppKit: NSAccessibilityEntryPointIsAccessibilityElement
                      50 AppKit: NSAccessibilityPostNotificationForObservedElementWithUserInfo
                        50 WebCore: WebCore::AccessibilityMenuList::didUpdateActiveOption(int)
                          50 WebCore: WebCore::RenderMenuList::setTextFromOption(int)
                            50 WebCore: WebCore::HTMLSelectElement::selectOption(int, unsigned int)
                              50 WebCore: WebCore::HTMLOptionElement::insertedIntoAncestor(WebCore::Node::InsertionType, WebCore::ContainerNode&)
                                50 WebCore: WebCore::notifyNodeInsertedIntoDocument(WebCore::ContainerNode&, WebCore::Node&, WebCore::TreeScopeChange, WTF::Vector<WTF::Ref<WebCore::Node, WTF::DumbPtrTraits<WebCore::Node> >, 11ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&)
                                  50 WebCore: WebCore::notifyChildNodeInserted(WebCore::ContainerNode&, WebCore::Node&)
                                    26 WebCore: WebCore::ContainerNode::appendChildWithoutPreInsertionValidityCheck(WebCore::Node&)
                                    | 24 WebCore: WebCore::Node::appendChild(WebCore::Node&)
                                    | | 24 WebCore: WebCore::jsNodePrototypeFunctionAppendChild(JSC::JSGlobalObject*, JSC::CallFrame*)


<rdar://problem/74472851>

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210511/a48b6bed/attachment-0001.htm>