[release/9.0] Fix #12661 Null Reference Exception: System.Windows.Forms.TabControl.<WmSelChange> (#12728)

Fixes 12661
Customer Impact
A customer reported a crash in their application that uses WinForms TabControl and requested a fix in NET8 release. Application is running under accessibility tools and is removing TabPages from a control dynamically. When the selected page is removed, the selection moves to the next page and the corresponding accessibility event is queued using BeginInvoke to be raised. If by the time the event is raised, the page is removed, a NullReferenceException is thrown. No workaround is available.

Fix
Test if the selected page is still available before raising the accessibility event inside the BeginInvoke delegate.

Author: github-actions[bot]

src/System.Windows.Forms/src/System/Windows/Forms/Controls/TabControl/TabControl.cs

@@ -1956,7 +1956,14 @@ private bool WmSelChange()
             if (IsAccessibilityObjectCreated && SelectedTab?.ParentInternal is TabControl)
             {
                 SelectedTab.TabAccessibilityObject.RaiseAutomationEvent(UIA_EVENT_ID.UIA_SelectionItem_ElementSelectedEventId);
-                BeginInvoke((MethodInvoker)(() => SelectedTab.TabAccessibilityObject.RaiseAutomationEvent(UIA_EVENT_ID.UIA_AutomationFocusChangedEventId)));
+                BeginInvoke((MethodInvoker)(() =>
+                {
+                    if (IsAccessibilityObjectCreated && SelectedTab?.ParentInternal is TabControl &&
+                         !SelectedTab.IsDisposed && SelectedTab.TabAccessibilityObject is not null)
+                    {
+                        SelectedTab.TabAccessibilityObject.RaiseAutomationEvent(UIA_EVENT_ID.UIA_AutomationFocusChangedEventId);
+                    }
+                }));
             }
         }
         else

src/System.Windows.Forms/tests/UnitTests/System/Windows/Forms/TabControlTests.cs

@@ -5703,6 +5703,33 @@ public void TabControl_Invokes_SetToolTip_IfExternalToolTipIsSet()
         Assert.Equal(text, actual);
     }
 
+    [WinFormsFact]
+    public void TabControl_WmSelChange_SelectedTabIsNull_DoesNotThrowException()
+    {
+        using Form form = new();
+        using TabControl control = new();
+        using TabPage page1 = new("text1");
+        control.TabPages.Add(page1);
+        _ = control.AccessibilityObject;
+
+        form.Controls.Add(control);
+        form.Show();
+        control.SelectedIndex = 0;
+
+        Action act = () => control.TestAccessor().Dynamic.WmSelChange();
+        act.Should().NotThrow();
+
+        control.TabPages.Clear();
+
+        var exception = Record.Exception(() =>
+        {
+            Application.DoEvents();
+            Thread.Sleep(100);
+        });
+
+        exception.Should().BeNull();
+    }
+
     private class SubTabPage : TabPage
     {
     }