Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: a24f1800afcea004865a22aad3f016cc0e3cfb3e
https://github.com/WebKit/WebKit/commit/a24f1800afcea004865a22aad3f016cc0e3cfb3e
Author: Dominic Mazzoni <[email protected]>
Date: 2026-06-26 (Fri, 26 Jun 2026)
Changed paths:
M Source/WebCore/accessibility/ios/AXObjectCacheIOS.mm
Log Message:
-----------
AX: AXObjectCacheIOS postPlatformNotification needs to retain the element
https://bugs.webkit.org/show_bug.cgi?id=317951
rdar://180749251
Reviewed by Tyler Wilcock.
These calls:
[object.wrapper()
accessibilityOverrideProcessNotification:notificationName.get()
notificationData:nil];
[object.wrapper() accessibilityPostedNotification:notificationName.get()];
can trigger updateBackingStore, which can call detachWrapper(),
meaning the wrapper can become nil partway through the function.
We just need to retain the wrapper.
No tests, as no known repro yet, only seen from crash logs.
* Source/WebCore/accessibility/ios/AXObjectCacheIOS.mm:
(WebCore::AXObjectCache::postPlatformNotification):
(WebCore::AXObjectCache::postPlatformAnnouncementNotification):
Canonical link: https://commits.webkit.org/315932@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
