Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 87c7b11098edfd79e9a41c68ca0abfcd777accb4
https://github.com/WebKit/WebKit/commit/87c7b11098edfd79e9a41c68ca0abfcd777accb4
Author: Andres Gonzalez <[email protected]>
Date: 2024-03-26 (Tue, 26 Mar 2024)
Changed paths:
M Source/WebCore/accessibility/AXTreeStore.h
Log Message:
-----------
AX: Crash in AXTextMarker constructor.
https://bugs.webkit.org/show_bug.cgi?id=271731
<rdar://problem/125441080>
Reviewed by Tyler Wilcock.
When creating an AXTextMarker or AXTextMarkerRange from a client-provided
AXTextMarkerRef, we cannot assume that the tree ID in the data provided is
valid. This patch adds checks for valid tree IDs in the corresponding
AXTreeStore methods.
* Source/WebCore/accessibility/AXTreeStore.h:
(WebCore::AXTreeStore<T>::axObjectCacheForID):
(WebCore::AXTreeStore<T>::isolatedTreeForID):
Canonical link: https://commits.webkit.org/276722@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
