136064 2014-08-19 02:13:12 -0700 ASSERTION FAILED: anchorType() == PositionIsOffsetInAnchor in WebCore::Position::offsetInContainerNode 2014-09-08 06:03:54 -0700 1 1 1 Unclassified WebKit New Bugs 528+ (Nightly build) Unspecified Unspecified RESOLVED DUPLICATE 121497 P2 Normal --- 116980 1 mhodovan.u-szeged webkit-unassigned darin eric rhodovan.u-szeged rniwa oldest_to_newest 1029986 0 236807 mhodovan.u-szeged 2014-08-19 02:13:12 -0700 Created attachment 236807 Test Test: <script> function dom_manipulation () { document.execCommand("selectall", false, null); document.execCommand("removeformat", true, null); } </script> <body onload="dom_manipulation()" contenteditable> <wbr "><svg></svg><samp></samp><s><script></script>"> Output: ASSERTION FAILED: anchorType() == PositionIsOffsetInAnchor Source/WebCore/dom/Position.h(108) : int WebCore::Position::offsetInContainerNode() const Backtrace: #0 in WTFCrash () at Source/WTF/wtf/Assertions.cpp:329 #1 in WebCore::Position::offsetInContainerNode (this=0x7fffffffc470) at Source/WebCore/dom/Position.h:108 #2 in WebCore::ApplyStyleCommand::removeInlineStyle (this=0x836490, style=0x8365c0, start=..., end=...) at Source/WebCore/editing/ApplyStyleCommand.cpp:1146 #3 in WebCore::ApplyStyleCommand::applyInlineStyle (this=0x836490, style=0x8365c0) at Source/WebCore/editing/ApplyStyleCommand.cpp:635 #4 in WebCore::ApplyStyleCommand::doApply (this=0x836490) at Source/WebCore/editing/ApplyStyleCommand.cpp:218 #5 in WebCore::CompositeEditCommand::applyCommandToComposite (this=0x84e600, prpCommand=...) at Source/WebCore/editing/CompositeEditCommand.cpp:278 #6 in WebCore::RemoveFormatCommand::doApply (this=0x84e600) at Source/WebCore/editing/RemoveFormatCommand.cpp:93 #7 in WebCore::CompositeEditCommand::apply (this=0x84e600) at Source/WebCore/editing/CompositeEditCommand.cpp:227 #8 in WebCore::applyCommand (command=...) at Source/WebCore/editing/CompositeEditCommand.cpp:182 #9 in WebCore::Editor::removeFormattingAndStyle (this=0x727ea0) at Source/WebCore/editing/Editor.cpp:903 #10 in WebCore::executeRemoveFormat (frame=...) at Source/WebCore/editing/EditorCommand.cpp:985 #11 in WebCore::Editor::Command::execute (this=0x7fffffffc7e0, parameter=..., triggeringEvent=0x0) at Source/WebCore/editing/EditorCommand.cpp:1740 #12 in WebCore::Document::execCommand (this=0x765f20, commandName=..., userInterface=true, value=...) at Source/WebCore/dom/Document.cpp:4276 #13 in WebCore::jsDocumentPrototypeFunctionExecCommand (exec=0x7fffffffc8d0) at WebKitBuild/Debug/DerivedSources/WebCore/JSDocument.cpp:4526 #14 in ?? () #15 in ?? () #16 in llint_entry () from WebKitBuild/Debug/lib/libjavascriptcore_efl.so.1 1033835 1 rhodovan.u-szeged 2014-09-08 06:03:54 -0700 *** This bug has been marked as a duplicate of bug 121497 *** 236807 2014-08-19 02:13:12 -0700 2014-08-19 02:13:12 -0700 Test test.html text/html 259 mhodovan.u-szeged PHNjcmlwdD4KZnVuY3Rpb24gZG9tX21hbmlwdWxhdGlvbiAoKSB7CiAgZG9jdW1lbnQuZXhlY0Nv bW1hbmQoInNlbGVjdGFsbCIsIGZhbHNlLCBudWxsKTsKICBkb2N1bWVudC5leGVjQ29tbWFuZCgi cmVtb3ZlZm9ybWF0IiwgdHJ1ZSwgbnVsbCk7Cn0KPC9zY3JpcHQ+Cjxib2R5IG9ubG9hZD0iZG9t X21hbmlwdWxhdGlvbigpIiBjb250ZW50ZWRpdGFibGU+Cjx3YnIgIj48c3ZnPjwvc3ZnPjxzYW1w Pjwvc2FtcD48cz48c2NyaXB0Pjwvc2NyaXB0PiI+Cg==