[Webkit-unassigned] [Bug 240218] New: [WinCairo][WK1] accessibility/aria-combobox-control-owns-elements.html is crashing after 250325 at main

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=240218

            Bug ID: 240218
           Summary: [WinCairo][WK1]
                    accessibility/aria-combobox-control-owns-elements.html
                    is crashing after 250325 at main
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Accessibility
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: Hironori.Fujii at sony.com
                CC: andresg_22 at apple.com,
                    webkit-bug-importer at group.apple.com

[WinCairo][WK1] accessibility/aria-combobox-control-owns-elements.html is crashing after 250325 at main

ASSERTION FAILED: document().settings().ariaReflectionForElementReferencesEnabled()
C:\home\webkit\gb\Source\WebCore\dom/Element.cpp(1946) : WebCore::Element::attributeChanged
1   00007FFF012F23CB WTFCrash
2   00007FFEA6E39BEE WTFCrashWithInfo
3   00007FFEA9AEA87C WebCore::Element::attributeChanged
4   00007FFEA9D10238 WebCore::StyledElement::attributeChanged
5   00007FFEA9AF6E05 WebCore::Element::didAddAttribute
6   00007FFEA9AF83A9 WebCore::Element::addAttributeInternal
7   00007FFEA9BD76AF WebCore::Element::setAttributeInternal
8   00007FFEA9AE48DA WebCore::Element::setAttribute
9   00007FFEA7B8F21B `WebCore::jsElementPrototypeFunction_setAttributeBody'::`34'::<lambda_1>::operator()
10  00007FFEA7BD4886 WebCore::toJS<WebCore::IDLUndefined,`WebCore::jsElementPrototypeFunction_setAttributeBody'::`34'::<lambda_1> >
11  00007FFEA7B8F0CD WebCore::jsElementPrototypeFunction_setAttributeBody
12  00007FFEA7BB5E65 WebCore::IDLOperation<WebCore::JSElement>::call<&WebCore::jsElementPrototypeFunction_setAttributeBody,0>
13  00007FFEA7B789C5 WebCore::jsElementPrototypeFunction_setAttribute
14  0000022F000011BE

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220508/9c65fef3/attachment-0001.htm>