Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: ace5138bf15012f7bcc0fffff31fb4e1f40fb6e7
https://github.com/WebKit/WebKit/commit/ace5138bf15012f7bcc0fffff31fb4e1f40fb6e7
Author: Tyler Wilcock <[email protected]>
Date: 2026-01-14 (Wed, 14 Jan 2026)
Changed paths:
M Source/WebCore/accessibility/AXCoreObject.cpp
Log Message:
-----------
AX: A malformed accessibility tree can cause infinite looping in
AXCoreObject::unignoredChildren
https://bugs.webkit.org/show_bug.cgi?id=305492
rdar://164424064
Reviewed by Joshua Hoffman.
Add a failsafe condition to avoid looping infinitely and eventually crashing
when trying to create a vector beyond the
max allowed size.
* Source/WebCore/accessibility/AXCoreObject.cpp:
(WebCore::AXCoreObject::unignoredChildren):
Canonical link: https://commits.webkit.org/305625@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
