<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>223545</bug_id>
          
          <creation_ts>2021-03-19 17:15:50 -0700</creation_ts>
          <short_desc>Crash in ReplaceSelectionCommand::doApply()</short_desc>
          <delta_ts>2021-03-30 14:57:33 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>HTML Editing</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          <see_also>https://bugs.webkit.org/show_bug.cgi?id=223960</see_also>
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Julian Gonzalez">julian_a_gonzalez</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>ews-watchlist</cc>
    
    <cc>mifenton</cc>
    
    <cc>rniwa</cc>
    
    <cc>wenson_hsieh</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1741957</commentid>
    <comment_count>0</comment_count>
    <who name="Julian Gonzalez">julian_a_gonzalez</who>
    <bug_when>2021-03-19 17:15:50 -0700</bug_when>
    <thetext>e.g.

frame #0: WebCore`WebCore::CompositeEditCommand::splitTreeToNode(WebCore::Node&amp;, WebCore::Node&amp;, bool)
frame #1: WebCore`WebCore::ReplaceSelectionCommand::doApply()
frame #2: WebCore`WebCore::CompositeEditCommand::apply()
frame #3: WebCore`WebCore::executeInsertFragment(WebCore::Frame&amp;, WTF::Ref&lt;WebCore::DocumentFragment, WTF::RawPtrTraits&lt;WebCore::DocumentFragment&gt; &gt;&amp;&amp;)
frame #4: WebCore`WebCore::executeInsertNode(WebCore::Frame&amp;, WTF::Ref&lt;WebCore::Node, WTF::RawPtrTraits&lt;WebCore::Node&gt; &gt;&amp;&amp;)
frame #5: WebCore`WebCore::executeInsertImage(WebCore::Frame&amp;, WebCore::Event*, WebCore::EditorCommandSource, WTF::String const&amp;)
frame #6: WebCore`WebCore::Document::execCommand(WTF::String const&amp;, bool, WTF::String const&amp;)

&lt;rdar://problem/73938060&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1741964</commentid>
    <comment_count>1</comment_count>
      <attachid>423794</attachid>
    <who name="Julian Gonzalez">julian_a_gonzalez</who>
    <bug_when>2021-03-19 17:44:26 -0700</bug_when>
    <thetext>Created attachment 423794
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1742684</commentid>
    <comment_count>2</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2021-03-22 23:19:38 -0700</bug_when>
    <thetext>Committed r274847: &lt;https://commits.webkit.org/r274847&gt;

All reviewed patches have been landed. Closing bug and clearing flags on attachment 423794.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>423794</attachid>
            <date>2021-03-19 17:44:26 -0700</date>
            <delta_ts>2021-03-22 23:19:39 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-223545-20210319174425.patch</filename>
            <type>text/plain</type>
            <size>4030</size>
            <attacher name="Julian Gonzalez">julian_a_gonzalez</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjc0NDU2CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D
aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggZGUwN2UwNDVmM2Q3ZGVh
NTlkZWY1YzM0NjY0NzVmNTcxYjM0MDRiYi4uZTFhZDAzNzYxZWJiYWNmYzY5Yzc4OGYwOTliZmRj
ODY0NDkwMDRiZSAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv
dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDE4IEBACisyMDIxLTAzLTE5ICBKdWxp
YW4gR29uemFsZXogIDxqdWxpYW5fYV9nb256YWxlekBhcHBsZS5jb20+CisKKyAgICAgICAgQ3Jh
c2ggaW4gUmVwbGFjZVNlbGVjdGlvbkNvbW1hbmQ6OmRvQXBwbHkoKQorICAgICAgICBodHRwczov
L2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MjIzNTQ1CisKKyAgICAgICAgUmV2aWV3
ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgVGVzdDogZWRpdGluZy9leGVjQ29tbWFu
ZC9pbnNlcnQtaW1hZ2UtaW4tY29tcG9zZWQtbGlzdC5odG1sCisKKyAgICAgICAgQWRkIGEgbWlz
c2luZyBjaGVjayBpbiBSZXBsYWNlU2VsZWN0aW9uQ29tbWFuZDo6ZG9BcHBseSgpCisgICAgICAg
IHRvIHByZXZlbnQgY2FsbGluZyBzcGxpdFRyZWVUb05vZGUoKSB3aXRoIG51bGxwdHIuCisKKyAg
ICAgICAgKiBlZGl0aW5nL1JlcGxhY2VTZWxlY3Rpb25Db21tYW5kLmNwcDoKKyAgICAgICAgKFdl
YkNvcmU6OlJlcGxhY2VTZWxlY3Rpb25Db21tYW5kOjpkb0FwcGx5KToKKwogMjAyMS0wMy0xNSAg
WmFsYW4gQnVqdGFzICA8emFsYW5AYXBwbGUuY29tPgogCiAgICAgICAgIFtNdWx0aS1jb2x1bW5d
IElnbm9yZSBsaW5lIGdyaWQgb2Zmc2V0IHdoZW4gdGhlIGdyaWQgbGluZSBpcyBzaG9ydGVyIHRo
YW4gMC41cHgKZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL2VkaXRpbmcvUmVwbGFjZVNlbGVj
dGlvbkNvbW1hbmQuY3BwIGIvU291cmNlL1dlYkNvcmUvZWRpdGluZy9SZXBsYWNlU2VsZWN0aW9u
Q29tbWFuZC5jcHAKaW5kZXggNWQzYmNmNzFjMDcxMzQ1MjhjMmI4OTA0NGQyMWQ3OTUwNDAzMDhk
My4uMzhhN2Y1MjhhYjNlNjczYjFiMDdiYWRmYWE1MTNjNWI2MzhhYTcyZiAxMDA2NDQKLS0tIGEv
U291cmNlL1dlYkNvcmUvZWRpdGluZy9SZXBsYWNlU2VsZWN0aW9uQ29tbWFuZC5jcHAKKysrIGIv
U291cmNlL1dlYkNvcmUvZWRpdGluZy9SZXBsYWNlU2VsZWN0aW9uQ29tbWFuZC5jcHAKQEAgLTEy
MTMsNyArMTIxMyw3IEBAIHZvaWQgUmVwbGFjZVNlbGVjdGlvbkNvbW1hbmQ6OmRvQXBwbHkoKQog
ICAgICAgICB9CiAKICAgICAgICAgaWYgKFJlZlB0cjxOb2RlPiBub2RlVG9TcGxpdFRvID0gbm9k
ZVRvU3BsaXRUb0F2b2lkUGFzdGluZ0ludG9JbmxpbmVOb2Rlc1dpdGhTdHlsZShpbnNlcnRpb25Q
b3MpKSB7Ci0gICAgICAgICAgICBpZiAoaW5zZXJ0aW9uUG9zLmNvbnRhaW5lck5vZGUoKSAhPSBu
b2RlVG9TcGxpdFRvLT5wYXJlbnROb2RlKCkpIHsKKyAgICAgICAgICAgIGlmIChub2RlVG9TcGxp
dFRvLT5wYXJlbnROb2RlKCkgJiYgaW5zZXJ0aW9uUG9zLmNvbnRhaW5lck5vZGUoKSAhPSBub2Rl
VG9TcGxpdFRvLT5wYXJlbnROb2RlKCkpIHsKICAgICAgICAgICAgICAgICBOb2RlKiBzcGxpdFN0
YXJ0ID0gaW5zZXJ0aW9uUG9zLmNvbXB1dGVOb2RlQWZ0ZXJQb3NpdGlvbigpOwogICAgICAgICAg
ICAgICAgIGlmICghc3BsaXRTdGFydCkKICAgICAgICAgICAgICAgICAgICAgc3BsaXRTdGFydCA9
IGluc2VydGlvblBvcy5jb250YWluZXJOb2RlKCk7CmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9D
aGFuZ2VMb2cgYi9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cKaW5kZXggOGJkZDRiY2UyMTRiMTYzMzk3
Yjk2OGI0MjQ5ZDNlMTE3MGYyMGE2ZC4uNGRjNzE5ODkzYWRmYWI5NWI2NTNmNGViMjE5YWU0NWIz
NWRiYjM0OSAxMDA2NDQKLS0tIGEvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCisrKyBiL0xheW91dFRl
c3RzL0NoYW5nZUxvZwpAQCAtMSwzICsxLDE3IEBACisyMDIxLTAzLTE5ICBKdWxpYW4gR29uemFs
ZXogIDxqdWxpYW5fYV9nb256YWxlekBhcHBsZS5jb20+CisKKyAgICAgICAgQ3Jhc2ggaW4gUmVw
bGFjZVNlbGVjdGlvbkNvbW1hbmQ6OmRvQXBwbHkoKQorICAgICAgICBodHRwczovL2J1Z3Mud2Vi
a2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MjIzNTQ1CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9C
T0RZIChPT1BTISkuCisKKyAgICAgICAgQWRkIGEgdGVzdCB0byBjYXRjaCB0aGlzIG51bGwgcG9p
bnRlciBkZXJlZmVyZW5jZS4KKyAgICAgICAgVGhhbmtzIHRvIFJ5b3N1a2UgTml3YSBmb3Igc2ln
bmlmaWNhbnQgd29yayBpbiByZWR1Y2luZworICAgICAgICB0aGlzIHRlc3QgY2FzZS4KKworICAg
ICAgICAqIGVkaXRpbmcvZXhlY0NvbW1hbmQvaW5zZXJ0LWltYWdlLWluLWNvbXBvc2VkLWxpc3Qt
ZXhwZWN0ZWQudHh0OiBBZGRlZC4KKyAgICAgICAgKiBlZGl0aW5nL2V4ZWNDb21tYW5kL2luc2Vy
dC1pbWFnZS1pbi1jb21wb3NlZC1saXN0Lmh0bWw6IEFkZGVkLgorCiAyMDIxLTAzLTE1ICBaYWxh
biBCdWp0YXMgIDx6YWxhbkBhcHBsZS5jb20+CiAKICAgICAgICAgW011bHRpLWNvbHVtbl0gSWdu
b3JlIGxpbmUgZ3JpZCBvZmZzZXQgd2hlbiB0aGUgZ3JpZCBsaW5lIGlzIHNob3J0ZXIgdGhhbiAw
LjVweApkaWZmIC0tZ2l0IGEvTGF5b3V0VGVzdHMvZWRpdGluZy9leGVjQ29tbWFuZC9pbnNlcnQt
aW1hZ2UtaW4tY29tcG9zZWQtbGlzdC1leHBlY3RlZC50eHQgYi9MYXlvdXRUZXN0cy9lZGl0aW5n
L2V4ZWNDb21tYW5kL2luc2VydC1pbWFnZS1pbi1jb21wb3NlZC1saXN0LWV4cGVjdGVkLnR4dApu
ZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw
MDAwMDAwMDAwLi4wMzgzMTYyMGY2NDgwNDUzOGUyMGU5NmExMTMzYmFlOTFkNmI0Y2VkCi0tLSAv
ZGV2L251bGwKKysrIGIvTGF5b3V0VGVzdHMvZWRpdGluZy9leGVjQ29tbWFuZC9pbnNlcnQtaW1h
Z2UtaW4tY29tcG9zZWQtbGlzdC1leHBlY3RlZC50eHQKQEAgLTAsMCArMSBAQAorVGVzdCBwYXNz
ZXMgaWYgaXQgZG9lcyBub3QgY3Jhc2guCmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9lZGl0aW5n
L2V4ZWNDb21tYW5kL2luc2VydC1pbWFnZS1pbi1jb21wb3NlZC1saXN0Lmh0bWwgYi9MYXlvdXRU
ZXN0cy9lZGl0aW5nL2V4ZWNDb21tYW5kL2luc2VydC1pbWFnZS1pbi1jb21wb3NlZC1saXN0Lmh0
bWwKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw
MDAwMDAwMDAwMDAwMC4uMWMzNDEwMDc5NmUyZDQ2N2E1NjA5MTc2MjBkMTg0ZmM4ZDBhNTdjMgot
LS0gL2Rldi9udWxsCisrKyBiL0xheW91dFRlc3RzL2VkaXRpbmcvZXhlY0NvbW1hbmQvaW5zZXJ0
LWltYWdlLWluLWNvbXBvc2VkLWxpc3QuaHRtbApAQCAtMCwwICsxLDIwIEBACis8IURPQ1RZUEUg
aHRtbD4NCis8L2h0bWw+DQorPGh0bWw+DQorPGhlYWQ+DQorPHNjcmlwdD4NCitvbmxvYWQgPSAo
KSA9PiB7DQorICAgIGlmICh3aW5kb3cudGVzdFJ1bm5lcikNCisgICAgICAgIHRlc3RSdW5uZXIu
ZHVtcEFzVGV4dCgpOw0KKw0KKyAgICBjb25zdCBiciA9IGRvY3VtZW50LnF1ZXJ5U2VsZWN0b3Io
J2JyJyk7DQorICAgIGJyLmlubmVySFRNTCA9ICc8ZGl2IHN0eWxlPSJ0ZXh0LWluZGVudDogLTFl
bTsiPjxzcGFuPmZvbzwvc3Bhbj48L2Rpdj4nOw0KKyAgICBnZXRTZWxlY3Rpb24oKS5zZXRCYXNl
QW5kRXh0ZW50KGRvY3VtZW50LnF1ZXJ5U2VsZWN0b3IoJ3NwYW4nKS5maXJzdENoaWxkLCAwLCBi
ciwgMSk7DQorICAgIGRvY3VtZW50LmV4ZWNDb21tYW5kKCJpbnNlcnRJbWFnZSIsICIjZm9vIik7
DQorfQ0KKzwvc2NyaXB0Pg0KKzwvaGVhZD4NCis8Ym9keSBjb250ZW50ZWRpdGFibGU+DQorVGVz
dCBwYXNzZXMgaWYgaXQgZG9lcyBub3QgY3Jhc2guDQorPGJyIHN0eWxlPSJjb250ZW50OiAnJyI+
PHNwYW4gc3R5bGU9ImRpc3BsYXk6IG5vbmUiPg0KKzwvYm9keT4NCg==
</data>

          </attachment>
      

    </bug>

</bugzilla>