Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 571420d70dafe1e1dd0ad0e9f07f0a67cda00d1a
https://github.com/WebKit/WebKit/commit/571420d70dafe1e1dd0ad0e9f07f0a67cda00d1a
Author: Joshua Hoffman <[email protected]>
Date: 2025-10-22 (Wed, 22 Oct 2025)
Changed paths:
M Source/WebCore/accessibility/AXObjectCache.cpp
Log Message:
-----------
AX: Check if renderer is being destroyed before creating an AX object in
getOrCreate
https://bugs.webkit.org/show_bug.cgi?id=301287
rdar://162709868
Reviewed by Tyler Wilcock.
We create a CheckedPtr with the node's renderer in getOrCreateSlow. But, if
that renderer is already
being destroyed, we can crash when the CheckedPtr ultimately is destroyed.
* Source/WebCore/accessibility/AXObjectCache.cpp:
(WebCore::AXObjectCache::getOrCreateSlow):
Canonical link: https://commits.webkit.org/301978@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
