142913 2015-03-20 11:00:27 -0700 [iOS] WebContent crash attempting to select text with a gesture at RenderObject::absoluteBoundingBoxRect 2015-03-23 13:53:20 -0700 1 1 1 Unclassified WebKit WebKit2 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED P2 Normal --- 1 enrica enrica sam thorton oldest_to_newest 1078896 0 enrica 2015-03-20 11:00:27 -0700 Looks like a null dereferencing 1078897 1 enrica 2015-03-20 11:00:59 -0700 rdar://problem/16400033 1079006 2 249151 enrica 2015-03-20 17:18:42 -0700 Created attachment 249151 Patch 1079399 3 enrica 2015-03-23 13:53:20 -0700 Committed revision 181869. 249151 2015-03-20 17:18:42 -0700 2015-03-23 12:05:23 -0700 Patch crash-in-rangeForWebSelectionAtPosition.txt text/plain 2278 enrica SW5kZXg6IFNvdXJjZS9XZWJLaXQyL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi S2l0Mi9DaGFuZ2VMb2cJKHJldmlzaW9uIDE4MTgyMCkKKysrIFNvdXJjZS9XZWJLaXQyL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE4IEBACisyMDE1LTAzLTIwICBFbnJpY2Eg Q2FzdWNjaSAgPGVucmljYUBhcHBsZS5jb20+CisKKyAgICAgICAgW2lPU10gV2ViQ29udGVudCBj cmFzaCBhdHRlbXB0aW5nIHRvIHNlbGVjdCB0ZXh0IHdpdGggYSBnZXN0dXJlIGF0IFJlbmRlck9i amVjdDo6YWJzb2x1dGVCb3VuZGluZ0JveFJlY3QuCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJr aXQub3JnL3Nob3dfYnVnLmNnaT9pZD0xNDI5MTMKKyAgICAgICAgcmRhcjovL3Byb2JsZW0vMTY0 MDAwMzMKKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBX aGVuIGxvb2tpbmcgZm9yIHRoZSBiZXN0IGNhbmRpZGF0ZSByYW5nZSBhdCB0aGUgZ2l2ZW4gcG9z aXRpb24sCisgICAgICAgIHdlIHNob3VsZCBza2lwIG5vZGVzIHRoYXQgZG9uJ3QgaGF2ZSBhIHJl bmRlcmVyLgorICAgICAgICBUaGlzIGlzIGEgc3BlY3VsYXRpdmUgZml4LgorCisgICAgICAgICog V2ViUHJvY2Vzcy9XZWJQYWdlL2lvcy9XZWJQYWdlSU9TLm1tOgorICAgICAgICAoV2ViS2l0OjpX ZWJQYWdlOjpyYW5nZUZvcldlYlNlbGVjdGlvbkF0UG9zaXRpb24pOgorCiAyMDE1LTAzLTIwICBD aHJpcyBEdW1leiAgPGNkdW1lekBhcHBsZS5jb20+CiAKICAgICAgICAgW1dLMl0gTmV0d29ya0Nh Y2hlIHJldHJpZXZhbHMgc29tZXRpbWVzIGZhaWwgb24gYnJvd3NlciBzdGFydHVwCkluZGV4OiBT b3VyY2UvV2ViS2l0Mi9XZWJQcm9jZXNzL1dlYlBhZ2UvaW9zL1dlYlBhZ2VJT1MubW0KPT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PQotLS0gU291cmNlL1dlYktpdDIvV2ViUHJvY2Vzcy9XZWJQYWdlL2lvcy9XZWJQYWdlSU9T Lm1tCShyZXZpc2lvbiAxODE4MDQpCisrKyBTb3VyY2UvV2ViS2l0Mi9XZWJQcm9jZXNzL1dlYlBh Z2UvaW9zL1dlYlBhZ2VJT1MubW0JKHdvcmtpbmcgY29weSkKQEAgLTgzNSwxMSArODM1LDEzIEBA IFBhc3NSZWZQdHI8UmFuZ2U+IFdlYlBhZ2U6OnJhbmdlRm9yV2ViU2UKIAogICAgIE5vZGUqIGJl c3RDaG9pY2UgPSBjdXJyZW50Tm9kZTsKICAgICB3aGlsZSAoY3VycmVudE5vZGUpIHsKLSAgICAg ICAgYm91bmRpbmdSZWN0SW5TY3JvbGxWaWV3Q29vcmRpbmF0ZXMgPSBjdXJyZW50Tm9kZS0+cmVu ZGVyZXIoKS0+YWJzb2x1dGVCb3VuZGluZ0JveFJlY3QodHJ1ZSk7Ci0gICAgICAgIGJvdW5kaW5n UmVjdEluU2Nyb2xsVmlld0Nvb3JkaW5hdGVzLnNjYWxlKG1fcGFnZS0+cGFnZVNjYWxlRmFjdG9y KCkpOwotICAgICAgICBpZiAoYm91bmRpbmdSZWN0SW5TY3JvbGxWaWV3Q29vcmRpbmF0ZXMud2lk dGgoKSA+IG1fYmxvY2tTZWxlY3Rpb25EZXNpcmVkU2l6ZS53aWR0aCgpICYmIGJvdW5kaW5nUmVj dEluU2Nyb2xsVmlld0Nvb3JkaW5hdGVzLmhlaWdodCgpID4gbV9ibG9ja1NlbGVjdGlvbkRlc2ly ZWRTaXplLmhlaWdodCgpKQotICAgICAgICAgICAgYnJlYWs7Ci0gICAgICAgIGJlc3RDaG9pY2Ug PSBjdXJyZW50Tm9kZTsKKyAgICAgICAgaWYgKGN1cnJlbnROb2RlLT5yZW5kZXJlcigpKSB7Cisg ICAgICAgICAgICBib3VuZGluZ1JlY3RJblNjcm9sbFZpZXdDb29yZGluYXRlcyA9IGN1cnJlbnRO b2RlLT5yZW5kZXJlcigpLT5hYnNvbHV0ZUJvdW5kaW5nQm94UmVjdCh0cnVlKTsKKyAgICAgICAg ICAgIGJvdW5kaW5nUmVjdEluU2Nyb2xsVmlld0Nvb3JkaW5hdGVzLnNjYWxlKG1fcGFnZS0+cGFn ZVNjYWxlRmFjdG9yKCkpOworICAgICAgICAgICAgaWYgKGJvdW5kaW5nUmVjdEluU2Nyb2xsVmll d0Nvb3JkaW5hdGVzLndpZHRoKCkgPiBtX2Jsb2NrU2VsZWN0aW9uRGVzaXJlZFNpemUud2lkdGgo KSAmJiBib3VuZGluZ1JlY3RJblNjcm9sbFZpZXdDb29yZGluYXRlcy5oZWlnaHQoKSA+IG1fYmxv Y2tTZWxlY3Rpb25EZXNpcmVkU2l6ZS5oZWlnaHQoKSkKKyAgICAgICAgICAgICAgICBicmVhazsK KyAgICAgICAgICAgIGJlc3RDaG9pY2UgPSBjdXJyZW50Tm9kZTsKKyAgICAgICAgfQogICAgICAg ICBjdXJyZW50Tm9kZSA9IGN1cnJlbnROb2RlLT5wYXJlbnRFbGVtZW50KCk7CiAgICAgfQogCg==