[Webkit-unassigned] [Bug 278980] New: Crash in a11y layer?

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=278980

            Bug ID: 278980
           Summary: Crash in a11y layer?
           Product: WebKit
           Version: Other
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKitGTK
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: muziknavi at gmail.com
                CC: bugs-noreply at webkitgtk.org

Created attachment 472387

  --> https://bugs.webkit.org/attachment.cgi?id=472387&action=review

bt full

* Arch Linux
* gtk4 4.15.6-r90-g6c88713f82
* webkitgtk-6.0 2.45.6-r1349-gb53fec47fe5a
* epiphany 47.rc

#0  __pthread_kill_implementation (threadid=<optimized out>, signo=signo at entry=6, no_tid=no_tid at entry=0)
    at pthread_kill.c:44
#1  0x00007f9bc12a5463 in __pthread_kill_internal (threadid=<optimized out>, signo=6) at pthread_kill.c:78
#2  0x00007f9bc124c120 in __GI_raise (sig=sig at entry=6) at ../sysdeps/posix/raise.c:26
#3  0x00007f9bc12334c3 in __GI_abort () at abort.c:79
#4  0x00007f9bc815251a in WTF::CrashOnOverflow::crash() () at WTF/Headers/wtf/CheckedArithmetic.h:109
#5  0x00007f9bc8152509 in WTF::CrashOnOverflow::overflowed() () at WTF/Headers/wtf/CheckedArithmetic.h:102
#6  0x00007f9bc94af2e7 in at () at WTF/Headers/wtf/Vector.h:822
#7  operator[] () at WTF/Headers/wtf/Vector.h:827
#8  UTF16OffsetToUTF8 ()
    at /usr/src/debug/webkitgtk-6.0/WebKit/Source/WebCore/accessibility/atspi/AccessibilityObjectTextAtspi.cpp:255
#9  0x00007f9bc94af2e7 in textAttributesWithUTF8Offset () from /usr/lib/libwebkitgtk-6.0.so.4
#10 0x00007f9bc94a9062 in operator() ()
    at /usr/src/debug/webkitgtk-6.0/WebKit/Source/WebCore/accessibility/atspi/AccessibilityObjectTextAtspi.cpp:138
#11 __invoke ()
    at /usr/src/debug/webkitgtk-6.0/WebKit/Source/WebCore/accessibility/atspi/AccessibilityObjectTextAtspi.cpp:85
#12 0x00007f9bc1b3fdf2 in call_in_idle_cb (user_data=0x7f9b90018ab0) at ../glib/gio/gdbusconnection.c:5458
#13 0x00007f9bc1945459 in g_main_dispatch (context=0x55e344cdb9b0) at ../glib/glib/gmain.c:3357
#14 0x00007f9bc19a80d7 in g_main_context_dispatch_unlocked (context=0x55e344cdb9b0) at ../glib/glib/gmain.c:4208
#15 g_main_context_iterate_unlocked.isra.0 (context=0x55e344cdb9b0, block=block at entry=1, dispatch=dispatch at entry=1, 
    self=<optimized out>) at ../glib/glib/gmain.c:4273
#16 0x00007f9bc1946187 in g_main_loop_run (loop=0x55e344d1c5d0) at ../glib/glib/gmain.c:4475
#17 0x00007f9bc5b4b27f in run () at /usr/src/debug/webkitgtk-6.0/WebKit/Source/WTF/wtf/glib/RunLoopGLib.cpp:108
#18 0x00007f9bc8718301 in run ()
    at /usr/src/debug/webkitgtk-6.0/WebKit/Source/WebKit/Shared/AuxiliaryProcessMain.h:72
#19 AuxiliaryProcessMain<WebKit::WebProcessMainGtk> ()
    at /usr/src/debug/webkitgtk-6.0/WebKit/Source/WebKit/Shared/AuxiliaryProcessMain.h:98
#20 WebProcessMain () at /usr/src/debug/webkitgtk-6.0/WebKit/Source/WebKit/WebProcess/gtk/WebProcessMainGtk.cpp:106
#21 0x00007f9bc1234e08 in __libc_start_call_main (main=main at entry=0x55e309ee38a0 <main>, argc=argc at entry=4, 
    argv=argv at entry=0x7ffe18d39738) at ../sysdeps/nptl/libc_start_call_main.h:58
#22 0x00007f9bc1234ecc in __libc_start_main_impl (main=0x55e309ee38a0 <main>, argc=4, argv=0x7ffe18d39738, 
    init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffe18d39728)
    at ../csu/libc-start.c:360
#23 0x000055e309ee37c5 in _start ()

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20240901/d81cda98/attachment.htm>