<html>
<head>
<base href="https://bugs.webkit.org/" />
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - [AX] WebProcess from WebKitGtk+ 2.10.0 compiled in Debug mode hits ASSERT on textUnderElement"
href="https://bugs.webkit.org/show_bug.cgi?id=150670#c6">Comment # 6</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - [AX] WebProcess from WebKitGtk+ 2.10.0 compiled in Debug mode hits ASSERT on textUnderElement"
href="https://bugs.webkit.org/show_bug.cgi?id=150670">bug 150670</a>
from <span class="vcard"><a class="email" href="mailto:jdiggs@igalia.com" title="Joanmarie Diggs (irc: joanie) <jdiggs@igalia.com>"> <span class="fn">Joanmarie Diggs (irc: joanie)</span></a>
</span></b>
<pre>Created <span class=""><a href="attachment.cgi?id=264603" name="attach_264603" title="test case">attachment 264603</a> <a href="attachment.cgi?id=264603&action=edit" title="test case">[details]</a></span>
test case
I can reproduce this crash and came up with a greatly simplified test case (attached).
It seems like there's some craziness taking place that eventually works its way to the accessibility code. For instance:
1. Delete the space inside the 'script' element and the crash goes away and the text gets rendered.
2. Get rid of the float style in the first list item and the crash goes away and the text gets rendered.
3. Get rid of the text-transform style in the second list item and the crash goes away and the text gets rendered.
If you instead leave the attached test case as-is and view it in a non-debug build, the text gets rendered and you can use the accessible text interface to get the text for each list item element.
When I first started looking at this bug, my question was: Are the two asserts in question still needed? (The layout test associated with the addition of those assertions still passes when run with a debug build from which those assertions have been removed.) Now my question is WTF is going on, especially with the first item above (removing the space inside the 'script' element makes the crash go away).</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>