Bug 244421

Summary: AX: AXObjectCache::remove(Node&) can be called while performing a cache update causing m_deferred* vectors to be modified as we iterate over them
Product: WebKit Reporter: Tyler Wilcock <tyler_w>
Component: AccessibilityAssignee: Tyler Wilcock <tyler_w>
Status: RESOLVED FIXED    
Severity: Normal CC: aboxhall, andresg_22, apinheiro, cfleizach, dmazzoni, ews-watchlist, jcraig, jdiggs, samuel_white, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch
none
Patch
none
Patch
none
Patch
none
Patch none

Description Tyler Wilcock 2022-08-26 18:19:26 PDT 
AXObjectCache::remove(Node&) can be called while performing a cache update causing m_deferred* vectors to be modified as we iterate over them
Comment 1 Radar WebKit Bug Importer 2022-08-26 18:19:36 PDT 
<rdar://problem/99211879>
Comment 2 Tyler Wilcock 2022-08-26 18:19:58 PDT 
rdar://98729717
Comment 3 Tyler Wilcock 2022-08-26 18:29:34 PDT 
Created attachment 461909 [details]
Patch
Comment 4 chris fleizach 2022-08-26 19:11:52 PDT 
Comment on attachment 461909 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=461909&action=review

> COMMIT_MESSAGE:10
> +When this happens, the Node is removed m_deferredAttributeChanges while

Node is removed from
Comment 5 Tyler Wilcock 2022-08-26 19:22:56 PDT 
Created attachment 461911 [details]
Patch
Comment 6 Tyler Wilcock 2022-08-27 09:28:48 PDT 
Created attachment 461921 [details]
Patch
Comment 7 Tyler Wilcock 2022-08-27 09:33:54 PDT 
Created attachment 461922 [details]
Patch
Comment 8 Tyler Wilcock 2022-08-27 09:35:10 PDT 
Created attachment 461923 [details]
Patch
Comment 9 EWS 2022-08-27 15:50:10 PDT 
Committed 253871@main (77ab8bd37796): <https://commits.webkit.org/253871@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 461923 [details].