104058 2012-12-04 16:20:21 -0800 Crash on OS X when shift clicking outside of input 2016-03-07 12:03:26 -0800 1 1 1 Unclassified WebKit HTML Editing 525.x (Safari 3.2) Mac All RESOLVED FIXED https://www.smartsheet.com/b/publish?EQBCT=b1db535e9e0e4a25aad4f4dce00ee475 InRadar P1 Normal --- 1 mkbitbucket max.hong.shen ap bjnortier brian.harper commit-queue enrica max.hong.shen mkbitbucket rniwa tkent oldest_to_newest 783077 0 mkbitbucket 2012-12-04 16:20:21 -0800 Open the URL above in either Chrome or Safari on OS X and double click on one of the populated cells (to enter edit mode - think spreadsheet). Then, shift-click into another cell and the browser crashes. Our web application (Smartsheet) leaves the DOM in a perfectly valid state and this works just as expected on FF (any OS) as well as Chrome and IE on Windows. The browser crashes even before a mousedown JS event is triggered, so there is no way for our web application to work around this bug. We have tried to recreate a simplified scenario with minimal HTML, but (so far) have been unable to do so. 783954 1 ap 2012-12-05 11:57:53 -0800 Crashes both Safari 6.0.2 and ToT. <rdar://problem/12279599> 784529 2 tkent 2012-12-05 20:36:22 -0800 Stack in Google Chrome 23: Thread 0 *CRASHED* ( EXC_BAD_ACCESS / KERN_PROTECTION_FAILURE @ 0x00000014 ) 0x01e9231a [Google Chrome Framework] - ../dom/Node.h:752] WebCore::textDistance 0x01e921b8 [Google Chrome Framework] - EventHandler.cpp:547] WebCore::EventHandler::handleMousePressEventSingleClick 0x01e925fb [Google Chrome Framework] - EventHandler.cpp:642] WebCore::EventHandler::handleMousePressEvent 0x01e9552f [Google Chrome Framework] - EventHandler.cpp:1615] WebCore::EventHandler::handleMousePressEvent 0x013a14e8 [Google Chrome Framework] - PageWidgetDelegate.cpp:207] WebKit::PageWidgetEventHandler::handleMouseDown 0x013e4561 [Google Chrome Framework] - WebViewImpl.cpp:558] WebKit::WebViewImpl::handleMouseDown 842095 3 brian.harper 2013-02-26 09:33:21 -0800 Why was this downgraded from Critical to Normal? It's a crashing bug, and has a severe impact for our customers using Macs. They will lose any unsaved data from our app when the crash occurs. I understand that the circumstances aren't all that common in terms of the entire browser audience, but they're not uncommon for our tens of thousands of paying customers, as we've had several reports to our support personnel regarding this. 842132 4 ap 2013-02-26 10:09:17 -0800 The bug was upgraded from P2 to P1, being a reproducible crasher. I don't know of any WebKit engineers who prioritize bugs based on them being marked Critical. 878090 5 max.hong.shen 2013-04-18 14:48:47 -0700 I will try to fix it. 878259 6 198809 max.hong.shen 2013-04-18 23:27:46 -0700 Created attachment 198809 proposal fix 879229 7 198809 cshu 2013-04-22 10:19:29 -0700 Comment on attachment 198809 proposal fix LGTM. Maybe it's better to mention the original test case was fixed by this patch, too, in the ChangeLog. 879251 8 commit-queue 2013-04-22 10:53:49 -0700 The commit-queue encountered the following flaky tests while processing attachment 198809: svg/as-image/img-relative-height.html bug 114140 (author: zimmermann@kde.org) The commit-queue is continuing to process your patch. 879252 9 198809 commit-queue 2013-04-22 10:55:15 -0700 Comment on attachment 198809 proposal fix Clearing flags on attachment: 198809 Committed r148894: <http://trac.webkit.org/changeset/148894> 879253 10 commit-queue 2013-04-22 10:55:17 -0700 All reviewed patches have been landed. Closing bug. 1171696 11 tonikitoo 2016-03-07 12:03:26 -0800 *** Bug 114745 has been marked as a duplicate of this bug. *** 198809 2013-04-18 23:27:46 -0700 2013-04-22 10:55:14 -0700 proposal fix 104058v1.patch text/plain 4413 max.hong.shen ZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL0NoYW5nZUxvZyBiL0xheW91dFRlc3RzL0NoYW5nZUxv ZwppbmRleCA1YzdmN2Y4Li4xYWU3OTczIDEwMDY0NAotLS0gYS9MYXlvdXRUZXN0cy9DaGFuZ2VM b2cKKysrIGIvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTUgQEAKKzIwMTMtMDQt MTggIFlpIFNoZW4gIDxtYXguaG9uZy5zaGVuQGdtYWlsLmNvbT4KKworICAgICAgICBDcmFzaCBv biBPUyBYIHdoZW4gc2hpZnQgY2xpY2tpbmcgb3V0c2lkZSBvZiBpbnB1dAorICAgICAgICBodHRw czovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MTA0MDU4CisKKyAgICAgICAgUmV2 aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgQWRkIHRlc3QgZm9yIHNoaWZ0IGNs aWNrIGNyYXNoIGlzc3VlLgorCisgICAgICAgICogZWRpdGluZy9zZWxlY3Rpb24vY3Jhc2gtb24t c2hpZnQtY2xpY2stZXhwZWN0ZWQudHh0OiBBZGRlZC4KKyAgICAgICAgKiBlZGl0aW5nL3NlbGVj dGlvbi9jcmFzaC1vbi1zaGlmdC1jbGljay5odG1sOiBBZGRlZC4KKwogMjAxMy0wNC0xOCAgSmVz c2llIEJlcmxpbiAgPGpiZXJsaW5AYXBwbGUuY29tPgogCiAgICAgICAgIE1vcmUgY2xlYW5pbmcg dXAgb2Ygc2tpcHBlZCB0ZXN0cy4KZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL2VkaXRpbmcvc2Vs ZWN0aW9uL2NyYXNoLW9uLXNoaWZ0LWNsaWNrLWV4cGVjdGVkLnR4dCBiL0xheW91dFRlc3RzL2Vk aXRpbmcvc2VsZWN0aW9uL2NyYXNoLW9uLXNoaWZ0LWNsaWNrLWV4cGVjdGVkLnR4dAppbmRleCBl NjlkZTI5Li5lMDczZTJkIDEwMDY0NAotLS0gYS9MYXlvdXRUZXN0cy9lZGl0aW5nL3NlbGVjdGlv bi9jcmFzaC1vbi1zaGlmdC1jbGljay1leHBlY3RlZC50eHQKKysrIGIvTGF5b3V0VGVzdHMvZWRp dGluZy9zZWxlY3Rpb24vY3Jhc2gtb24tc2hpZnQtY2xpY2stZXhwZWN0ZWQudHh0CkBAIC0wLDAg KzEsMiBAQAorVGhpcyB0ZXN0IHNoaWZ0IGNsaWNrcyBvdXRzaWRlIG9mIGEgZm9jdXNlZCBkaXYg d2l0aCByZW1vdmluZyB0aGUgZm9jdXNlZCBkaXYgZnJvbSB0aGUgZG9tIHRyZWUgYXQgdGhlIHNh bWUgdGltZS4gSWYgdGhpcyBkb2Vzbid0IGNyYXNoLCB0aGVuIHRoZSB0ZXN0IHBhc3Nlcy4KKwpk aWZmIC0tZ2l0IGEvTGF5b3V0VGVzdHMvZWRpdGluZy9zZWxlY3Rpb24vY3Jhc2gtb24tc2hpZnQt Y2xpY2suaHRtbCBiL0xheW91dFRlc3RzL2VkaXRpbmcvc2VsZWN0aW9uL2NyYXNoLW9uLXNoaWZ0 LWNsaWNrLmh0bWwKaW5kZXggZTY5ZGUyOS4uZmFiZjg2ZCAxMDA2NDQKLS0tIGEvTGF5b3V0VGVz dHMvZWRpdGluZy9zZWxlY3Rpb24vY3Jhc2gtb24tc2hpZnQtY2xpY2suaHRtbAorKysgYi9MYXlv dXRUZXN0cy9lZGl0aW5nL3NlbGVjdGlvbi9jcmFzaC1vbi1zaGlmdC1jbGljay5odG1sCkBAIC0w LDAgKzEsMzkgQEAKKzwhRE9DVFlQRSBodG1sPgorPGh0bWw+Cis8Ym9keT4KKzxkaXYgaWQ9InBh cmVudERpdiI+Cis8ZGl2IGlkPSJmaXJzdENoaWxkRGl2IiBjb250ZW50ZWRpdGFibGU+Zmlyc3Qg Y2hpbGQgZGl2PC9kaXY+Cis8ZGl2IGlkPSJzZWNvbmRDaGlsZERpdiIgY29udGVudGVkaXRhYmxl PnNlY29uZCBjaGlsZCBkaXY8L2Rpdj4KKzxkaXYvPgorPHNjcmlwdD4KKworZnVuY3Rpb24gY2xp Y2tPblRlc3RQYWdlKHgsIHksIGtleXMpIHsKKyAgICBldmVudFNlbmRlci5tb3VzZU1vdmVUbyh4 LCB5KTsKKyAgICBldmVudFNlbmRlci5tb3VzZURvd24oMCwga2V5cyk7CisgICAgZXZlbnRTZW5k ZXIubW91c2VVcCgwLCBrZXlzKTsKK30KKworZnVuY3Rpb24gcnVuVGVzdCgpIHsKKyAgICB2YXIg cGFyZW50RGl2RWxlbWVudCA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdwYXJlbnREaXYnKTsK KyAgICBjbGlja09uVGVzdFBhZ2UocGFyZW50RGl2RWxlbWVudC5vZmZzZXRMZWZ0ICsgMTAsIHBh cmVudERpdkVsZW1lbnQub2Zmc2V0VG9wICsgMTApOworICAgIGV2ZW50U2VuZGVyLmxlYXBGb3J3 YXJkKDMwMCk7CisgICAgd2luZG93Lm9ubW91c2Vkb3duID0gcmVtb3ZlRmlyc3RDaGlsZERpdjsK KyAgICBjbGlja09uVGVzdFBhZ2UoMTAwLCAxMDAsIFsnc2hpZnRLZXknXSk7CisgICAgZG9jdW1l bnQuZ2V0RWxlbWVudEJ5SWQoJ3NlY29uZENoaWxkRGl2JykuaW5uZXJIVE1MID0gIlRoaXMgdGVz dCBzaGlmdCBjbGlja3Mgb3V0c2lkZSBvZiBhIGZvY3VzZWQgZGl2IHdpdGggcmVtb3ZpbmcgdGhl IGZvY3VzZWQgZGl2IGZyb20gdGhlIGRvbSB0cmVlIGF0IHRoZSBzYW1lIHRpbWUuIElmIHRoaXMg ZG9lc24ndCBjcmFzaCwgdGhlbiB0aGUgdGVzdCBwYXNzZXMuIjsKK30KKworZnVuY3Rpb24gcmVt b3ZlRmlyc3RDaGlsZERpdigpIHsKKyAgICB2YXIgcGFyZW50RGl2RWxlbWVudCA9IGRvY3VtZW50 LmdldEVsZW1lbnRCeUlkKCdwYXJlbnREaXYnKTsKKyAgICB2YXIgY2hpbGREaXZFbGVtZW50ID0g ZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoJ2ZpcnN0Q2hpbGREaXYnKTsKKyAgICBwYXJlbnREaXZF bGVtZW50LnJlbW92ZUNoaWxkKGNoaWxkRGl2RWxlbWVudCk7Cit9CisKK2lmICh3aW5kb3cuZXZl bnRTZW5kZXIpCisgICAgcnVuVGVzdCgpOworCitpZiAod2luZG93LnRlc3RSdW5uZXIpCisgICAg dGVzdFJ1bm5lci5kdW1wQXNUZXh0KCk7CisKKzwvc2NyaXB0PgorPC9ib2R5PgorPC9odG1sPgpk aWZmIC0tZ2l0IGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nIGIvU291cmNlL1dlYkNvcmUvQ2hh bmdlTG9nCmluZGV4IDg5MTVmODIuLjQ0ZDk4NGYgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJDb3Jl L0NoYW5nZUxvZworKysgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKQEAgLTEsMyArMSwyMCBA QAorMjAxMy0wNC0xOCAgWWkgU2hlbiAgPG1heC5ob25nLnNoZW5AZ21haWwuY29tPgorCisgICAg ICAgIENyYXNoIG9uIE9TIFggd2hlbiBzaGlmdCBjbGlja2luZyBvdXRzaWRlIG9mIGlucHV0Cisg ICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0xMDQwNTgKKwor ICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBTaGlmdCBjbGlj a2luZyBvdXRzaWRlIG9mIGEgZm9jdXNlZCBkaXYgd2hpbGUgcmVtb3ZpbmcgdGhlIGZvY3VzZWQg ZGl2IGZyb20KKyAgICAgICAgdGhlIGRvbSB0cmVlIGF0IHRoZSBzYW1lIHRpbWUgbWF5IGhpdCBh IG51bGwgdmlzaWJsZSBwb3NpdGlvbiwgd2hpY2ggc2hvdWxkCisgICAgICAgIG5vdCBiZSB1c2Vk IHRvIGNhbGN1bGF0ZSB0aGUgdGV4dCBkaXN0YW5jZSB3aXRoIHRoZSBuZXcgc2VsZWN0aW9uJ3Mg c3RhcnQgYW5kCisgICAgICAgIGVuZCBwb3NpdGlvbi4gT3RoZXJ3aXNlLCB0aGUgYnJvd3NlciBt YXkgY3Jhc2guCisKKyAgICAgICAgVGVzdDogZWRpdGluZy9zZWxlY3Rpb24vY3Jhc2gtb24tc2hp ZnQtY2xpY2suaHRtbAorCisgICAgICAgICogcGFnZS9FdmVudEhhbmRsZXIuY3BwOgorICAgICAg ICAoV2ViQ29yZTo6RXZlbnRIYW5kbGVyOjpoYW5kbGVNb3VzZVByZXNzRXZlbnRTaW5nbGVDbGlj ayk6CisKIDIwMTMtMDQtMTggIEplciBOb2JsZSAgPGplci5ub2JsZUBhcHBsZS5jb20+CiAKICAg ICAgICAgVW5yZXZpZXdlZCBnYXJkZW5pbmc7IGZpeCBiaW5kaW5ncyB0ZXN0cyBhZnRlciByMTQ4 NzAwLgpkaWZmIC0tZ2l0IGEvU291cmNlL1dlYkNvcmUvcGFnZS9FdmVudEhhbmRsZXIuY3BwIGIv U291cmNlL1dlYkNvcmUvcGFnZS9FdmVudEhhbmRsZXIuY3BwCmluZGV4IDk2MzYwNGIuLjg5YjRi OWUgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJDb3JlL3BhZ2UvRXZlbnRIYW5kbGVyLmNwcAorKysg Yi9Tb3VyY2UvV2ViQ29yZS9wYWdlL0V2ZW50SGFuZGxlci5jcHAKQEAgLTYwNSw3ICs2MDUsNyBA QCBib29sIEV2ZW50SGFuZGxlcjo6aGFuZGxlTW91c2VQcmVzc0V2ZW50U2luZ2xlQ2xpY2soY29u c3QgTW91c2VFdmVudFdpdGhIaXRUZXN0UgogICAgICAgICAgICAgICAgIHBvcyA9IHNlbGVjdGlv bkluVXNlclNlbGVjdEFsbC5lbmQoKTsKICAgICAgICAgfQogCi0gICAgICAgIGlmICghbV9mcmFt ZS0+ZWRpdG9yKCktPmJlaGF2aW9yKCkuc2hvdWxkQ29uc2lkZXJTZWxlY3Rpb25Bc0RpcmVjdGlv bmFsKCkpIHsKKyAgICAgICAgaWYgKCFtX2ZyYW1lLT5lZGl0b3IoKS0+YmVoYXZpb3IoKS5zaG91 bGRDb25zaWRlclNlbGVjdGlvbkFzRGlyZWN0aW9uYWwoKSAmJiBwb3MuaXNOb3ROdWxsKCkpIHsK ICAgICAgICAgICAgIC8vIFNlZSA8cmRhcjovL3Byb2JsZW0vMzY2ODE1Nz4gUkVHUkVTU0lPTiAo TWFpbCk6IHNoaWZ0LWNsaWNrIGRlc2VsZWN0cyB3aGVuIHNlbGVjdGlvbgogICAgICAgICAgICAg Ly8gd2FzIGNyZWF0ZWQgcmlnaHQtdG8tbGVmdAogICAgICAgICAgICAgUG9zaXRpb24gc3RhcnQg PSBuZXdTZWxlY3Rpb24uc3RhcnQoKTsK