[Webkit-unassigned] [Bug 267348] New: AX: ASSERTION FAILED: m_table inside of AXIsolatedTree::create

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=267348

            Bug ID: 267348
           Summary: AX: ASSERTION FAILED: m_table inside of
                    AXIsolatedTree::create
           Product: WebKit
           Version: Safari Technology Preview
          Hardware: All
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Accessibility
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: dm_mazzoni at apple.com
                CC: andresg_22 at apple.com,
                    webkit-bug-importer at group.apple.com

When I build WebKit on tip-of-tree in debug mode, then visit any webpage (even a simple Hello, world html page) with VoiceOver running, I get an assertion failure:

ASSERTION FAILED: m_table
/Volumes/Code/safari/OpenSource/WebKitBuild/Debug/usr/local/include/wtf/HashTable.h(231)

The crash is happening inside of AXIsolatedTree::create at the top of this for loop:

    for (auto& relatedObjectID : axObjectCache.relations().keys()) {

That loop was added here, so I think it's likely a recent regression from that change:

    AX: Move objectsForIds off of the main thread
    https://bugs.webkit.org/show_bug.cgi?id=266608
    rdar://116133586

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20240110/877e2426/attachment.htm>