Chromium Code Reviews| Index: Source/core/accessibility/AXListBox.cpp | 
| diff --git a/Source/core/accessibility/AXListBox.cpp b/Source/core/accessibility/AXListBox.cpp | 
| index d306616316c55295841118ba1065f0a3a96692dc..dfaae409030d582c8311078827aa4d7b6e427c3b 100644 | 
| --- a/Source/core/accessibility/AXListBox.cpp | 
| +++ b/Source/core/accessibility/AXListBox.cpp | 
| @@ -151,7 +151,8 @@ AXObject* AXListBox::elementAccessibilityHitTest(const IntPoint& point) const | 
| AXObject* listBoxOption = 0; | 
| unsigned length = m_children.size(); | 
| for (unsigned i = 0; i < length; i++) { | 
| - LayoutRect rect = toRenderListBox(m_renderer)->itemBoundingBoxRect(parentRect.location(), i); | 
| + RenderListBox* listBox = toRenderListBox(m_renderer); | 
| + LayoutRect rect = listBox->itemBoundingBoxRect(parentRect.location(), listBox->toRenderListBoxIndex(i)); | 
| 
 
keishi
2014/04/11 06:40:13
Ditto. toRenderListBoxIndex should be done inside
 
 | 
| // The cast to HTMLElement below is safe because the only other possible listItem type | 
| // would be a WMLElement, but WML builds don't use accessibility features at all. | 
| if (rect.contains(point)) { |