Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-119023

WebEngine accessibility crash when clicking on a link in a list on macOS

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • P2: Important
    • 6.5.5, 6.6.1, 6.7.0 FF
    • 6.5.3, 6.6.0
    • WebEngine
    • None
    • MacBook Pro M1 Max
      macOS Ventura 13.5.2
    • macOS
    • ea0682573 (dev), 5163615d6 (6.6), 4b564a587 (6.5)

    Description

      Looks like the same problem as QTBUG-113859.

      Steps to reproduce:

      Stack trace:

      Thread 0 Crashed:: CrBrowserMain Dispatch queue: com.apple.main-thread
      0   QtWebEngineCore               	       0x11a82af48 non-virtual thunk to QtWebEngineCore::BrowserAccessibilityInterface::table() const + 60 (browser_accessibility_qt.cpp:1148)
      1   libqcocoa.dylib               	       0x1084d40e4 -[QMacAccessibilityElement initWithId:role:] + 240 (qcocoaaccessibilityelement.mm:127)
      2   libqcocoa.dylib               	       0x1084d41a0 +[QMacAccessibilityElement elementWithId:] + 68 (qcocoaaccessibilityelement.mm:161)
      3   libqcocoa.dylib               	       0x1084d2760 QCocoaAccessibility::notifyAccessibilityUpdate(QAccessibleEvent*) + 104 (qcocoaaccessibility.mm:32)
      4   QtWebEngineCore               	       0x11a77ec8c content::BrowserAccessibilityManagerQt::FireBlinkEvent(ax::mojom::Event, content::BrowserAccessibility*, int) + 176 (browser_accessibility_manager_qt.cpp:108)
      5   QtWebEngineCore               	       0x11cea78e8 content::BrowserAccessibilityManager::OnAccessibilityEvents(content::AXEventNotificationDetails const&) + 1780 (browser_accessibility_manager.cc:689)
      6   QtWebEngineCore               	       0x11d392da0 SendAccessibilityEventsToManager + 24 (render_frame_host_impl.cc:6442) [inlined]
      7   QtWebEngineCore               	       0x11d392da0 content::RenderFrameHostImpl::HandleAXEvents(ui::AXTreeID const&, mojo::StructPtr<blink::mojom::AXUpdatesAndEvents>, int) + 1896 (render_frame_host_impl.cc:8161)
      8   QtWebEngineCore               	       0x11ceb33b0 Invoke<void (content::RenderFrameHostImpl::*)(const ui::AXTreeID &, mojo::StructPtr<blink::mojom::AXUpdatesAndEvents>, int), base::WeakPtr<content::RenderFrameHostImpl>, ui::AXTreeID, mojo::StructPtr<blink::mojom::AXUpdatesAndEvents>, int> + 44 (bind_internal.h:647) [inlined]
      9   QtWebEngineCore               	       0x11ceb33b0 MakeItSo<void (content::RenderFrameHostImpl::*)(const ui::AXTreeID &, mojo::StructPtr<blink::mojom::AXUpdatesAndEvents>, int), std::__1::tuple<base::WeakPtr<content::RenderFrameHostImpl>, ui::AXTreeID, mojo::StructPtr<blink::mojom::AXUpdatesAndEvents>, int> > + 84 (bind_internal.h:848) [inlined]
      10  QtWebEngineCore               	       0x11ceb33b0 RunImpl<void (content::RenderFrameHostImpl::*)(const ui::AXTreeID &, mojo::StructPtr<blink::mojom::AXUpdatesAndEvents>, int), std::__1::tuple<base::WeakPtr<content::RenderFrameHostImpl>, ui::AXTreeID, mojo::StructPtr<blink::mojom::AXUpdatesAndEvents>, int>, 0UL, 1UL, 2UL, 3UL> + 84 (bind_internal.h:920) [inlined]
      11  QtWebEngineCore               	       0x11ceb33b0 base::internal::Invoker<base::internal::BindState<void (content::RenderFrameHostImpl::*)(ui::AXTreeID const&, mojo::StructPtr<blink::mojom::AXUpdatesAndEvents>, int), base::WeakPtr<content::RenderFrameHostImpl>, ui::AXTreeID, mojo::StructPtr<blink::mojom::AXUpdatesAndEvents>, int>, void ()>::RunOnce(base::internal::BindStateBase*) + 112 (bind_internal.h:871)
      12  QtWebEngineCore               	       0x11e66cd00 Run + 20 (callback.h:145) [inlined]
      13  QtWebEngineCore               	       0x11e66cd00 base::(anonymous namespace)::PostTaskAndReplyRelay::RunTaskAndPostReply(base::(anonymous namespace)::PostTaskAndReplyRelay) + 44 (post_task_and_reply_impl.cc:100)
      14  QtWebEngineCore               	       0x11e66fa98 Invoke<void (*)(base::(anonymous namespace)::PostTaskAndReplyRelay), base::(anonymous namespace)::PostTaskAndReplyRelay> + 44 (bind_internal.h:537) [inlined]
      15  QtWebEngineCore               	       0x11e66fa98 MakeItSo<void (*)(base::(anonymous namespace)::PostTaskAndReplyRelay), std::__1::tuple<base::(anonymous namespace)::PostTaskAndReplyRelay> > + 44 (bind_internal.h:826) [inlined]
      16  QtWebEngineCore               	       0x11e66fa98 RunImpl<void (*)(base::(anonymous namespace)::PostTaskAndReplyRelay), std::__1::tuple<base::(anonymous namespace)::PostTaskAndReplyRelay>, 0UL> + 44 (bind_internal.h:920) [inlined]
      17  QtWebEngineCore               	       0x11e66fa98 base::internal::Invoker<base::internal::BindState<void (*)(base::(anonymous namespace)::PostTaskAndReplyRelay), base::(anonymous namespace)::PostTaskAndReplyRelay>, void ()>::RunOnce(base::internal::BindStateBase*) + 68 (bind_internal.h:871)
      18  QtWebEngineCore               	       0x11e6320a4 Run + 20 (callback.h:145) [inlined]
      19  QtWebEngineCore               	       0x11e6320a4 base::TaskAnnotator::RunTaskImpl(base::PendingTask&) + 252 (task_annotator.cc:134)
      20  QtWebEngineCore               	       0x11e64cfb8 */thread_controller_with_message_pump_impl.cc:443:29)> + 28 (task_annotator.h:72) [inlined]
      21  QtWebEngineCore               	       0x11e64cfb8 base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*) + 560 (thread_controller_with_message_pump_impl.cc:441)
      22  QtWebEngineCore               	       0x11e64cb84 base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() + 80 (thread_controller_with_message_pump_impl.cc:297)
      23  QtWebEngineCore               	       0x11a77f968 QtWebEngineCore::MessagePumpForUIQt::handleScheduledWork() + 64 (browser_main_parts_qt.cpp:196)
      24  QtCore                        	       0x10594d570 QObject::event(QEvent*) + 88
      25  QtCore                        	       0x10590b4ec QCoreApplicationPrivate::notify_helper(QObject*, QEvent*) + 384 (qcoreapplication.cpp:1285)
      26  QtCore                        	       0x10590b06c QCoreApplication::notifyInternal2(QObject*, QEvent*) + 292 (qcoreapplication.cpp:1118)
      27  QtCore                        	       0x10590c31c QCoreApplication::sendEvent(QObject*, QEvent*) + 16 (qcoreapplication.cpp:1536) [inlined]
      28  QtCore                        	       0x10590c31c QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) + 1428 (qcoreapplication.cpp:1898)
      29  libqcocoa.dylib               	       0x108476f18 QCocoaEventDispatcherPrivate::processPostedEvents() + 296 (qcocoaeventdispatcher.mm:880)
      30  libqcocoa.dylib               	       0x1084779f0 QCocoaEventDispatcherPrivate::postedEventsSourceCallback(void*) + 560 (qcocoaeventdispatcher.mm:902)
      31  CoreFoundation                	       0x18912663c __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 28
      32  CoreFoundation                	       0x1891265d0 __CFRunLoopDoSource0 + 176
      33  CoreFoundation                	       0x189126340 __CFRunLoopDoSources0 + 244
      34  CoreFoundation                	       0x189124f48 __CFRunLoopRun + 828
      35  CoreFoundation                	       0x1891244b8 CFRunLoopRunSpecific + 612
      36  HIToolbox                     	       0x192976df0 RunCurrentEventLoopInMode + 292
      37  HIToolbox                     	       0x192976c2c ReceiveNextEventCommon + 648
      38  HIToolbox                     	       0x192976984 _BlockUntilNextEventMatchingListInModeWithFilter + 76
      39  AppKit                        	       0x18c34b97c _DPSNextEvent + 636
      40  AppKit                        	       0x18c34ab18 -[NSApplication(NSEvent) _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 716
      41  AppKit                        	       0x18c33ef7c -[NSApplication run] + 464
      42  libqcocoa.dylib               	       0x1084762f4 QCocoaEventDispatcher::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) + 1908 (qcocoaeventdispatcher.mm:404)
      43  QtCore                        	       0x105914ccc QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) + 36 (qeventloop.cpp:100) [inlined]
      44  QtCore                        	       0x105914ccc QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) + 532 (qeventloop.cpp:182)
      45  QtCore                        	       0x10590b6f8 QCoreApplication::exec() + 112 (qcoreapplication.cpp:1439)
      46  quicknanobrowser              	       0x1046233a4 main + 1008 (main.cpp:52)
      47  dyld                          	       0x188ceff28 start + 2236
      

      Attachments

        Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              pvarga Peter Varga
              lbuckel Leon Buckel
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes