Steps to reproduce: 1. With a development build, run $ run-webkit-tests editing/deleting/delete-3800834-fix.html Results: DumpRenderTree(4229,0xa000ed68) malloc: *** error for object 0x6a5d70: double free DumpRenderTree(4229,0xa000ed68) malloc: *** set a breakpoint in szone_error to debug ================= ASSERTION FAILED: exceptionCode == 0 (/Users/ap/WebKit/WebCore/khtml/editing/ append_node_command.cpp:64 virtual void khtml::AppendNodeCommand::doApply()) =================
fixed