Bug 11003

Summary:	Gmail Editor: Crash at WebCore::Range::startPosition() when decreasing a indent
Product:	WebKit	Reporter:	Chris Petersen <c.petersen87>
Component:	HTML Editing	Assignee:	Nobody <webkit-unassigned>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	mitz
Priority:	P1	Keywords:	GoogleBug, InRadar
Version:	420+
Hardware:	Mac
OS:	OS X 10.4
Bug Depends on:
Bug Blocks:	9638

Description Chris Petersen 2006-09-23 23:35:57 PDT

When attempting to decrease a indent that was applied to a list in a Gmail HTML message, a crash occurs

WebCore::Range::startPosition()

* STEPS TO REPRODUCE
1. With TOT webkit r-16541, login into your gmail account
2. Create a new message  (Rich Formatting)
3. Place caret in message body and type some text
4. Click on either the ordered or unordered list toolbar icon
5. Press the "Indent More" toolbar icon.
6. Now, press the "Indent less" toolbar icon
7. Instead of removing the indent, a crash occurs

* RESULTS
Indent should be removed but a crash occurs instead

Comment 1 Chris Petersen 2006-09-23 23:36:52 PDT

This has been filed as <rdar://problem/4747695>

Comment 2 mitz 2006-09-24 00:12:07 PDT

ASSERTION FAILED: destination.deepEquivalent().node()->inDocument() (WebCore/editing/CompositeEditCommand.cpp:662 void WebCore::CompositeEditCommand::moveParagraphs(const WebCore::VisiblePosition&, const WebCore::VisiblePosition&, const WebCore::VisiblePosition&, bool, bool))

[Reproducible crashes are P1]

Comment 3 Justin Garcia 2006-09-26 12:57:42 PDT

r16587