When attempting to decrease a indent that was applied to a list in a Gmail HTML message, a crash occurs WebCore::Range::startPosition() * STEPS TO REPRODUCE 1. With TOT webkit r-16541, login into your gmail account 2. Create a new message (Rich Formatting) 3. Place caret in message body and type some text 4. Click on either the ordered or unordered list toolbar icon 5. Press the "Indent More" toolbar icon. 6. Now, press the "Indent less" toolbar icon 7. Instead of removing the indent, a crash occurs * RESULTS Indent should be removed but a crash occurs instead
This has been filed as <rdar://problem/4747695>
ASSERTION FAILED: destination.deepEquivalent().node()->inDocument() (WebCore/editing/CompositeEditCommand.cpp:662 void WebCore::CompositeEditCommand::moveParagraphs(const WebCore::VisiblePosition&, const WebCore::VisiblePosition&, const WebCore::VisiblePosition&, bool, bool)) [Reproducible crashes are P1]
r16587