<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>224977</bug_id>
          
          <creation_ts>2021-04-23 07:49:17 -0700</creation_ts>
          <short_desc>Crash in InsertParagraphSeparatorCommand::doApply</short_desc>
          <delta_ts>2021-07-26 13:47:41 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>HTML Editing</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          <see_also>https://bugs.webkit.org/show_bug.cgi?id=225267</see_also>
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          <dependson>226527</dependson>
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Ali Juma">ajuma</reporter>
          <assigned_to name="Frédéric Wang Nélar">fred.wang</assigned_to>
          <cc>bfulgham</cc>
    
    <cc>cdumez</cc>
    
    <cc>cgarcia</cc>
    
    <cc>esprehn+autocc</cc>
    
    <cc>ews-feeder</cc>
    
    <cc>ews-watchlist</cc>
    
    <cc>fred.wang</cc>
    
    <cc>gpoo</cc>
    
    <cc>iang</cc>
    
    <cc>kangil.han</cc>
    
    <cc>mifenton</cc>
    
    <cc>product-security</cc>
    
    <cc>rbuis</cc>
    
    <cc>rniwa</cc>
    
    <cc>rohitrao</cc>
    
    <cc>svillar</cc>
    
    <cc>webkit-bug-importer</cc>
    
    <cc>wenson_hsieh</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1753580</commentid>
    <comment_count>0</comment_count>
      <attachid>426906</attachid>
    <who name="Ali Juma">ajuma</who>
    <bug_when>2021-04-23 07:49:17 -0700</bug_when>
    <thetext>Created attachment 426906
Minimal test case

Filing this as a security bug since it was found using a fuzzer; there&apos;s no disclosure deadline for this bug.

This reproduces in an ASan build of WebKitTestRunner, and also in STP 123.

Stack:
=================================================================
==35165==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000020 (pc 0x0006500bb361 bp 0x7ffee22d3cf0 sp 0x7ffee22d3cf0 T0)
==35165==The signal is caused by a READ memory access.
==35165==Hint: address points to the zero page.
    #0 0x6500bb360 in WebCore::Node::parentNode() const (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x18d360)
    #1 0x653784827 in WebCore::CompositeEditCommand::insertNodeBefore(WTF::Ref&lt;WebCore::Node, WTF::RawPtrTraits&lt;WebCore::Node&gt; &gt;&amp;&amp;, WebCore::Node&amp;, WebCore::ShouldAssumeContentIsAlwaysEditable) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x3856827)
    #2 0x6538413ae in WebCore::InsertParagraphSeparatorCommand::doApply() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x39133ae)
    #3 0x65378c29a in WebCore::CompositeEditCommand::applyCommandToComposite(WTF::Ref&lt;WebCore::EditCommand, WTF::RawPtrTraits&lt;WebCore::EditCommand&gt; &gt;&amp;&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x385e29a)
    #4 0x6538a5c25 in WebCore::TypingCommand::insertParagraphSeparator() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x3977c25)
    #5 0x6538a3b07 in WebCore::TypingCommand::insertParagraphSeparatorAndNotifyAccessibility() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x3975b07)
    #6 0x65376dba4 in WebCore::CompositeEditCommand::apply() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x383fba4)
    #7 0x6538a397a in WebCore::TypingCommand::insertParagraphSeparator(WebCore::Document&amp;, unsigned int) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x397597a)
    #8 0x6538267a2 in WebCore::executeInsertParagraph(WebCore::Frame&amp;, WebCore::Event*, WebCore::EditorCommandSource, WTF::String const&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x38f87a2)
    #9 0x65348cfa3 in WebCore::Document::execCommand(WTF::String const&amp;, bool, WTF::String const&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x355efa3)
    #10 0x6509104aa in WebCore::jsDocumentPrototypeFunction_execCommandBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSDocument*) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x9e24aa)
    #11 0x65090ff6b in long long WebCore::IDLOperation&lt;WebCore::JSDocument&gt;::call&lt;&amp;(WebCore::jsDocumentPrototypeFunction_execCommandBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSDocument*)), (WebCore::CastedThisErrorBehavior)0&gt;(JSC::JSGlobalObject&amp;, JSC::CallFrame&amp;, char const*) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x9e1f6b)
    #12 0x26ee116011d7  (&lt;unknown module&gt;)
    #13 0x66c9f826a in llint_entry (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/JavaScriptCore.framework/Versions/A/JavaScriptCore:x86_64+0xb5026a)
    #14 0x66c9dd308 in vmEntryToJavaScript (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/JavaScriptCore.framework/Versions/A/JavaScriptCore:x86_64+0xb35308)
    #15 0x66e1822fd in JSC::Interpreter::executeCall(JSC::JSGlobalObject*, JSC::JSObject*, JSC::CallData const&amp;, JSC::JSValue, JSC::ArgList const&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/JavaScriptCore.framework/Versions/A/JavaScriptCore:x86_64+0x22da2fd)
    #16 0x66e825d8f in JSC::call(JSC::JSGlobalObject*, JSC::JSValue, JSC::CallData const&amp;, JSC::JSValue, JSC::ArgList const&amp;, WTF::NakedPtr&lt;JSC::Exception&gt;&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/JavaScriptCore.framework/Versions/A/JavaScriptCore:x86_64+0x297dd8f)
    #17 0x66e82614b in JSC::profiledCall(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::JSValue, JSC::CallData const&amp;, JSC::JSValue, JSC::ArgList const&amp;, WTF::NakedPtr&lt;JSC::Exception&gt;&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/JavaScriptCore.framework/Versions/A/JavaScriptCore:x86_64+0x297e14b)
    #18 0x652ce28b8 in WebCore::JSExecState::profiledCall(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::JSValue, JSC::CallData const&amp;, JSC::JSValue, JSC::ArgList const&amp;, WTF::NakedPtr&lt;JSC::Exception&gt;&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x2db48b8)
    #19 0x652d0b9d7 in WebCore::JSEventListener::handleEvent(WebCore::ScriptExecutionContext&amp;, WebCore::Event&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x2ddd9d7)
    #20 0x6535b0a5f in WebCore::EventTarget::innerInvokeEventListeners(WebCore::Event&amp;, WTF::Vector&lt;WTF::RefPtr&lt;WebCore::RegisteredEventListener, WTF::RawPtrTraits&lt;WebCore::RegisteredEventListener&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::RegisteredEventListener&gt; &gt;, 1ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt;, WebCore::EventTarget::EventInvokePhase) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x3682a5f)
    #21 0x6535b0302 in WebCore::EventTarget::fireEventListeners(WebCore::Event&amp;, WebCore::EventTarget::EventInvokePhase) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x3682302)
    #22 0x65357f349 in WebCore::EventContext::handleLocalEvents(WebCore::Event&amp;, WebCore::EventTarget::EventInvokePhase) const (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x3651349)
    #23 0x6535807ac in WebCore::dispatchEventInDOM(WebCore::Event&amp;, WebCore::EventPath const&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x36527ac)
    #24 0x65357fdb3 in WebCore::EventDispatcher::dispatchEvent(WebCore::Node&amp;, WebCore::Event&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x3651db3)
    #25 0x65368adf7 in WebCore::ScopedEventQueue::enqueueEvent(WTF::Ref&lt;WebCore::Event, WTF::RawPtrTraits&lt;WebCore::Event&gt; &gt;&amp;&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x375cdf7)
    #26 0x65357f678 in WebCore::EventDispatcher::dispatchScopedEvent(WebCore::Node&amp;, WebCore::Event&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x3651678)
    #27 0x65340cd9e in WebCore::dispatchChildRemovalEvents(WTF::Ref&lt;WebCore::Node, WTF::RawPtrTraits&lt;WebCore::Node&gt; &gt;&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x34ded9e)
    #28 0x6533f9b65 in WebCore::ContainerNode::removeChild(WebCore::Node&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x34cbb65)
    #29 0x6533fe07a in WebCore::ContainerNode::replaceChild(WebCore::Node&amp;, WebCore::Node&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x34d007a)
    #30 0x65357073e in WebCore::Element::setOuterHTML(WTF::String const&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x364273e)
    #31 0x6509d1746 in WebCore::setJSElement_outerHTMLSetter(JSC::JSGlobalObject&amp;, WebCore::JSElement&amp;, JSC::JSValue)::&apos;lambda&apos;()::operator()() const (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0xaa3746)
    #32 0x6509d15e6 in void WebCore::invokeFunctorPropagatingExceptionIfNecessary&lt;WebCore::setJSElement_outerHTMLSetter(JSC::JSGlobalObject&amp;, WebCore::JSElement&amp;, JSC::JSValue)::&apos;lambda&apos;()&gt;(JSC::JSGlobalObject&amp;, JSC::ThrowScope&amp;, WebCore::setJSElement_outerHTMLSetter(JSC::JSGlobalObject&amp;, WebCore::JSElement&amp;, JSC::JSValue)::&apos;lambda&apos;()&amp;&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0xaa35e6)
    #33 0x6509d1340 in WebCore::setJSElement_outerHTMLSetter(JSC::JSGlobalObject&amp;, WebCore::JSElement&amp;, JSC::JSValue) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0xaa3340)
    #34 0x65088d0d6 in bool WebCore::IDLAttribute&lt;WebCore::JSElement&gt;::set&lt;&amp;(WebCore::setJSElement_outerHTMLSetter(JSC::JSGlobalObject&amp;, WebCore::JSElement&amp;, JSC::JSValue)), (WebCore::CastedThisErrorBehavior)0&gt;(JSC::JSGlobalObject&amp;, long long, long long, JSC::PropertyName) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x95f0d6)
    #35 0x66e8d4afa in JSC::callCustomSetter(JSC::JSGlobalObject*, bool (*)(JSC::JSGlobalObject*, long long, long long, JSC::PropertyName), bool, JSC::JSObject*, JSC::JSValue, JSC::JSValue, JSC::PropertyName) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/JavaScriptCore.framework/Versions/A/JavaScriptCore:x86_64+0x2a2cafa)
    #36 0x66eb4d5d6 in JSC::JSObject::putInlineSlow(JSC::JSGlobalObject*, JSC::PropertyName, JSC::JSValue, JSC::PutPropertySlot&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/JavaScriptCore.framework/Versions/A/JavaScriptCore:x86_64+0x2ca55d6)
    #37 0x66e45364c in llint_slow_path_put_by_id (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/JavaScriptCore.framework/Versions/A/JavaScriptCore:x86_64+0x25ab64c)
    #38 0x66c9e752f in llint_entry (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/JavaScriptCore.framework/Versions/A/JavaScriptCore:x86_64+0xb3f52f)
    #39 0x66c9dd308 in vmEntryToJavaScript (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/JavaScriptCore.framework/Versions/A/JavaScriptCore:x86_64+0xb35308)
    #40 0x66e1822fd in JSC::Interpreter::executeCall(JSC::JSGlobalObject*, JSC::JSObject*, JSC::CallData const&amp;, JSC::JSValue, JSC::ArgList const&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/JavaScriptCore.framework/Versions/A/JavaScriptCore:x86_64+0x22da2fd)
    #41 0x66e825d8f in JSC::call(JSC::JSGlobalObject*, JSC::JSValue, JSC::CallData const&amp;, JSC::JSValue, JSC::ArgList const&amp;, WTF::NakedPtr&lt;JSC::Exception&gt;&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/JavaScriptCore.framework/Versions/A/JavaScriptCore:x86_64+0x297dd8f)
    #42 0x66e82614b in JSC::profiledCall(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::JSValue, JSC::CallData const&amp;, JSC::JSValue, JSC::ArgList const&amp;, WTF::NakedPtr&lt;JSC::Exception&gt;&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/JavaScriptCore.framework/Versions/A/JavaScriptCore:x86_64+0x297e14b)
    #43 0x652ce28b8 in WebCore::JSExecState::profiledCall(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::JSValue, JSC::CallData const&amp;, JSC::JSValue, JSC::ArgList const&amp;, WTF::NakedPtr&lt;JSC::Exception&gt;&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x2db48b8)
    #44 0x652dba67d in WebCore::ScheduledAction::executeFunctionInContext(JSC::JSGlobalObject*, JSC::JSValue, WebCore::ScriptExecutionContext&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x2e8c67d)
    #45 0x652dba05a in WebCore::ScheduledAction::execute(WebCore::Document&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x2e8c05a)
    #46 0x6544bf035 in WebCore::DOMTimer::fired() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x4591035)
    #47 0x65483bcb4 in WebCore::ThreadTimers::sharedTimerFiredInternal() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x490dcb4)
    #48 0x6548c5939 in WebCore::timerFired(__CFRunLoopTimer*, void*) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x4997939)
    #49 0x7fff30b00467 in __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ (/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation:x86_64+0x9f467)
    #50 0x7fff30afffcd in __CFRunLoopDoTimer (/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation:x86_64+0x9efcd)
    #51 0x7fff30affab8 in __CFRunLoopDoTimers (/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation:x86_64+0x9eab8)
    #52 0x7fff30ae470c in __CFRunLoopRun (/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation:x86_64+0x8370c)
    #53 0x7fff30ae3952 in CFRunLoopRunSpecific (/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation:x86_64+0x82952)
    #54 0x7fff331a11c7 in -[NSRunLoop(NSRunLoop) runMode:beforeDate:] (/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation:x86_64+0x601c7)
    #55 0x7fff33253c6e in -[NSRunLoop(NSRunLoop) run] (/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation:x86_64+0x112c6e)
    #56 0x7fff6acc04e9 in _xpc_objc_main.cold.4 (/usr/lib/system/libxpc.dylib:x86_64+0x164e9)
    #57 0x7fff6acc042f in _xpc_objc_main (/usr/lib/system/libxpc.dylib:x86_64+0x1642f)
    #58 0x7fff6acbff62 in xpc_main (/usr/lib/system/libxpc.dylib:x86_64+0x15f62)
    #59 0x640f03a83 in WebKit::XPCServiceMain(int, char const**) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebKit.framework/Versions/A/WebKit:x86_64+0xf03a83)
    #60 0x7fff6aa6ecc8 in start (/usr/lib/system/libdyld.dylib:x86_64+0x1acc8)
==35165==Register values:
rax = 0x0000000000000004  rbx = 0x00007ffee22d3d80  rcx = 0x0000100000000004  rdx = 0x0000000000000000
rdi = 0x0000000000000020  rsi = 0x00007ffee22d4370  rbp = 0x00007ffee22d3cf0  rsp = 0x00007ffee22d3cf0
 r8 = 0x0000000000000001   r9 = 0x0000000000000000  r10 = 0xffffffffffffffff  r11 = 0xfffffffffffffaf0
r12 = 0x00007ffee22d3d20  r13 = 0x00007ffee22d3d00  r14 = 0x00001fffdc45a7a0  r15 = 0x0000000000000000
========================
Clusterfuzz-id: 5684221868572672</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1755430</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2021-04-29 10:05:21 -0700</bug_when>
    <thetext>&lt;rdar://problem/77327339&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1761398</commentid>
    <comment_count>2</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2021-05-18 17:44:51 -0700</bug_when>
    <thetext>&lt;rdar://77270374&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1761400</commentid>
    <comment_count>3</comment_count>
      <attachid>429009</attachid>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2021-05-18 17:45:35 -0700</bug_when>
    <thetext>Created attachment 429009
Reduction (ASSERTION FAILED: refNode) -- fixed in bug 226527</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1762831</commentid>
    <comment_count>4</comment_count>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-05-22 12:29:11 -0700</bug_when>
    <thetext>Quick reverse-debugging shows we are in a situation where a &lt;body&gt; has display: table and a single &lt;img&gt; child. Then ContainerNode::traverseToChildAt with child index = 1 returns nullptr.

Although the code involved is different from bug 225267, this issue is also prevented by attachment 428919.

ASSERTION FAILED: refNode
at https://webkit-search.igalia.com/webkit/rev/61241a69457b1d5d1c68c82b673f489e8e3caf81/Source/WebCore/editing/InsertParagraphSeparatorCommand.cpp#278
(rr) reverse-f
(rr) reverse-f
(rr) reverse-f
(rr) p refNode
$1 = (WebCore::Node *) 0x0
(rr) rn
(rr) rn
https://webkit-search.igalia.com/webkit/rev/61241a69457b1d5d1c68c82b673f489e8e3caf81/Source/WebCore/editing/InsertParagraphSeparatorCommand.cpp#277
(rr) p startBlock
(rr) p showTree((Node*) startBlock)
*BODY	0x7f92618707b0 (renderer 0x7f9261870a80)  STYLE=display: table
	IMG	0x7f9261870840 (renderer 0x7f9261870c50)  STYLE=content: &apos;&apos;
$2 = void
(rr) p insertionPosition.computeOffsetInContainerNode()
$3 = 1</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1763074</commentid>
    <comment_count>5</comment_count>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-05-24 02:26:47 -0700</bug_when>
    <thetext>(In reply to Ryosuke Niwa from comment #3)
&gt; Created attachment 429009 [details]
&gt; Reduction

I&apos;m no longer able to reproduce the crash with this reduction. I&apos;m also getting a new debug assert with the original testcase:

ASSERTION FAILED: startBlock-&gt;firstChild()
../../Source/WebCore/editing/InsertParagraphSeparatorCommand.cpp(275) : virtual void WebCore::InsertParagraphSeparatorCommand::doApply()</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1763143</commentid>
    <comment_count>6</comment_count>
      <attachid>429534</attachid>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-05-24 08:31:25 -0700</bug_when>
    <thetext>Created attachment 429534
tentative patch for attachment 429009</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1763146</commentid>
    <comment_count>7</comment_count>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-05-24 08:41:27 -0700</bug_when>
    <thetext>(In reply to Frédéric Wang (:fredw) from comment #5)
&gt; (In reply to Ryosuke Niwa from comment #3)
&gt; &gt; Created attachment 429009 [details]
&gt; &gt; Reduction
&gt; 
&gt; I&apos;m no longer able to reproduce the crash with this reduction.

So there was some subtle thing happening. My editor adds a new line at the end of the tescase, which makes it no longer crash. Anyway, I uploaded a tentative patch to fix attachment 429009, which is essentially the same I had tried for bug 225267  and bug 221387 (tweaking createFragmentFromText does not seem enough here).

&gt; I&apos;m also getting a new debug assert with the original testcase:
&gt; 
&gt; ASSERTION FAILED: startBlock-&gt;firstChild()
&gt; ../../Source/WebCore/editing/InsertParagraphSeparatorCommand.cpp(275) :
&gt; virtual void WebCore::InsertParagraphSeparatorCommand::doApply()

This still happens with attachment 429534 applied and we have a AddressSanitizer: SEGV. Still need to debug this one...</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1763563</commentid>
    <comment_count>8</comment_count>
      <attachid>429664</attachid>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-05-25 10:24:01 -0700</bug_when>
    <thetext>Created attachment 429664
Reduce a bit the second issue

Reducing a bit the issue from comment 7.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1763868</commentid>
    <comment_count>9</comment_count>
      <attachid>429744</attachid>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-05-26 03:31:58 -0700</bug_when>
    <thetext>Created attachment 429744
Reduction (ASSERTION FAILED: startBlock-&gt;firstChild())</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1763973</commentid>
    <comment_count>10</comment_count>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-05-26 10:53:10 -0700</bug_when>
    <thetext>(In reply to Frédéric Wang (:fredw) from comment #5)
&gt; (In reply to Ryosuke Niwa from comment #3)
&gt; &gt; Created attachment 429009 [details]
&gt; &gt; Reduction
&gt; 
&gt; I&apos;m no longer able to reproduce the crash with this reduction. I&apos;m also
&gt; getting a new debug assert with the original testcase:
&gt; 
&gt; ASSERTION FAILED: startBlock-&gt;firstChild()
&gt; ../../Source/WebCore/editing/InsertParagraphSeparatorCommand.cpp(275) :
&gt; virtual void WebCore::InsertParagraphSeparatorCommand::doApply()

Preliminary debugging. At https://webkit-search.igalia.com/webkit/rev/59144827bcba50f5e287f957c38137c3bbe4a98e/Source/WebCore/editing/InsertParagraphSeparatorCommand.cpp#201 the state looks like this:

(rr) p showTree(visiblePos)
#document	0x61f00001dc80 (renderer 0x6160003ced80) 
	html	0x60c0002a6a00 (renderer (nil))  (needs style recalc)
	HTML	0x60c0002a6ac0 (renderer 0x61200007da40) 
		HTML	0x60c0002ab5c0 (renderer 0x61200006c4c0) 
*		#text	0x60b0000e91f0 &quot;0&quot;
		DIV	0x60c0002aacc0 (renderer 0x61200006c640) 
		HTML	0x60c0002aab40 (renderer 0x61200006c7c0) 
		HTML	0x60c0002b1d40 (renderer 0x6120000a1440) 
legacy, offset, offset:0
$1 = void
(rr) p isFirstInBlock
$2 = true
(rr) p isLastInBlock
$3 = false

When we hit the assert, startBlock is the inner (empty) HTML element, and so we are not following the comment saying &quot;startBlock should always have children, otherwise isLastInBlock would be true and it&apos;s handled above.&quot;.

The reason why isFirstInBlock is true is because PositionIterator::isCandidate() skips HTML element. Here is the backtrace:

#0  WebCore::PositionIterator::isCandidate() const (this=0x7ffd3ab7fe60)
    at ../../Source/WebCore/dom/PositionIterator.cpp:176
#1  0x00007fc13932439e in WebCore::nextCandidate(WebCore::Position const&amp;)
    (position=...) at ../../Source/WebCore/editing/Editing.cpp:198
#2  0x00007fc1394b5856 in WebCore::VisiblePosition::canonicalPosition(WebCore::Position const&amp;) (passedPosition=...)
    at ../../Source/WebCore/editing/VisiblePosition.cpp:558
#3  0x00007fc1394aef6f in WebCore::VisiblePosition::VisiblePosition(WebCore::Position const&amp;, WebCore::Affinity)
    (this=0x7ffd3ab80280, position=..., affinity=WebCore::Affinity::Downstream)
    at ../../Source/WebCore/editing/VisiblePosition.cpp:58
#4  0x00007fc1394da026 in WebCore::startOfBlock(WebCore::VisiblePosition const&amp;, WebCore::EditingBoundaryCrossingRule)
    (visiblePosition=..., rule=WebCore::CanCrossEditingBoundary)
    at ../../Source/WebCore/editing/VisibleUnits.cpp:1338
#5  0x00007fc1394da7e2 in WebCore::isStartOfBlock(WebCore::VisiblePosition const&amp;) (pos=...) at ../../Source/WebCore/editing/VisibleUnits.cpp:1357
#6  0x00007fc1393f6c63 in WebCore::InsertParagraphSeparatorCommand::doApply()
    (this=0x6120000a1740)
    at ../../Source/WebCore/editing/InsertParagraphSeparatorCommand.cpp:200</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1764288</commentid>
    <comment_count>11</comment_count>
      <attachid>429867</attachid>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-05-27 04:36:11 -0700</bug_when>
    <thetext>Created attachment 429867
Add an assert for Position&apos;s offset</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1764305</commentid>
    <comment_count>12</comment_count>
      <attachid>429872</attachid>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-05-27 05:56:06 -0700</bug_when>
    <thetext>Created attachment 429872
Add an assert for Position&apos;s offset

for EWS</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1764317</commentid>
    <comment_count>13</comment_count>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-05-27 06:56:34 -0700</bug_when>
    <thetext>(In reply to Frédéric Wang (:fredw) from comment #10)
&gt; (rr) p showTree(visiblePos)
&gt; #document	0x61f00001dc80 (renderer 0x6160003ced80) 
&gt; 	html	0x60c0002a6a00 (renderer (nil))  (needs style recalc)
&gt; 	HTML	0x60c0002a6ac0 (renderer 0x61200007da40) 
&gt; 		HTML	0x60c0002ab5c0 (renderer 0x61200006c4c0) 
&gt; *		#text	0x60b0000e91f0 &quot;0&quot;
&gt; 		DIV	0x60c0002aacc0 (renderer 0x61200006c640) 
&gt; 		HTML	0x60c0002aab40 (renderer 0x61200006c7c0) 
&gt; 		HTML	0x60c0002b1d40 (renderer 0x6120000a1440) 

So the fact that the startBlock is the inner HTML but the selection visiblePos on the text sibling is quite confusing. Debugging a bit more (see below), endingSelection() seems wrong to when entering InsertParagraphSeparatorCommand::doApply() : the anchor is the empty inner HTML but the associated OffsetInAnchor is 2. executing backward, this setup happened when the surroundContents function is called. It removes children of the inner HTML element and informs the doc about node removals, but for some reason the selection is not updated properly.

I attached a patch to ASSERT that the m_offset is valid, but this is causing failures.


ASSERTION FAILED: startBlock-&gt;firstChild()
../../Source/WebCore/editing/InsertParagraphSeparatorCommand.cpp(275) : virtual void WebCore::InsertParagraphSeparatorCommand::doApply()
(rr)  b InsertParagraphSeparatorCommand::doApply()
(rr) rc
(rr) 
(rr) delete
(rr)  p showTree(endingSelection().m_start)
#document	0x61f00001dc80 (renderer 0x6160003ce480) 
	html	0x60c0002a6940 (renderer (nil))  (needs style recalc)
	HTML	0x60c0002a6a00 (renderer 0x61200007d740) 
*		HTML	0x60c0002ab500 (renderer 0x61200006c1c0) 
		#text	0x60b0000e92a0 &quot;0&quot;
		DIV	0x60c0002aac00 (renderer 0x61200006c340) 
		HTML	0x60c0002aaa80 (renderer 0x61200006c4c0) 
		HTML	0x60c0002b1c80 (renderer 0x6120000a1140) 
offset, offset:2
$1 = void
(rr) watch -l endingSelection().m_start
Hardware watchpoint 3: -location endingSelection().m_start
(rr) rc
(rr) delete
(rr) reverse-f
(rr) 
(rr) bt
#0  0x00007f65de74ea03 in WebCore::EditCommand::EditCommand(WebCore::Document&amp;, WebCore::EditAction) (this=0x6120000a1440, document=..., editingAction=WebCore::EditAction::TypingInsertParagraph)
    at ../../Source/WebCore/editing/EditCommand.cpp:128
#1  0x00007f65e29d508c in WebCore::CompositeEditCommand::CompositeEditCommand(WebCore::Document&amp;, WebCore::EditAction) (this=0x6120000a1440, document=..., editingAction=WebCore::EditAction::TypingInsertParagraph)
    at ../../Source/WebCore/editing/CompositeEditCommand.cpp:335
#2  0x00007f65de820feb in WebCore::InsertParagraphSeparatorCommand::InsertParagraphSeparatorCommand(WebCore::Document&amp;, bool, bool, WebCore::EditAction)
    (this=0x6120000a1440, document=..., mustUseDefaultParagraphElement=false, pasteBlockqutoeIntoUnquotedArea=false, editingAction=WebCore::EditAction::TypingInsertParagraph)
    at ../../Source/WebCore/editing/InsertParagraphSeparatorCommand.cpp:65
#3  0x00007f65de7737c0 in WebCore::InsertParagraphSeparatorCommand::create(WebCore::Document&amp;, bool, bool, WebCore::EditAction)
    (document=..., useDefaultParagraphElement=false, pasteBlockqutoeIntoUnquotedArea=false, editingAction=WebCore::EditAction::TypingInsertParagraph) at ../../Source/WebCore/editing/InsertParagraphSeparatorCommand.h:38
(rr) p showTree(m_document-&gt;selection().selection())
#document	0x61f00001dc80 (renderer 0x6160003ce480) 
	html	0x60c0002a6940 (renderer (nil))  (needs style recalc)
	HTML	0x60c0002a6a00 (renderer 0x61200007d740) 
SE		HTML	0x60c0002ab500 (renderer 0x61200006c1c0) 
		#text	0x60b0000e92a0 &quot;0&quot;
		DIV	0x60c0002aac00 (renderer 0x61200006c340) 
		HTML	0x60c0002aaa80 (renderer 0x61200006c4c0) 
		HTML	0x60c0002b1c80 (renderer 0x6120000a1140) 
start: offset, offset:2
end: offset, offset:2
$2 = void
(rr) watch -l m_document-&gt;selection().selection().m_start
(rr) rc
(rr) delete
(rr) bt
#0  0x00007f65dd5bb208 in WebCore::Position::operator=(WebCore::Position const&amp;) (this=0x613000082bf8) at ../../Source/WebCore/dom/Position.h:54
#1  0x00007f65de8ec09c in WebCore::VisibleSelection::setWithoutValidation(WebCore::Position const&amp;, WebCore::Position const&amp;) (this=0x613000082bb8, anchor=..., focus=...) at ../../Source/WebCore/editing/VisibleSelection.cpp:467
#2  0x00007f65de7d5985 in WebCore::FrameSelection::respondToNodeModification(WebCore::Node&amp;, bool, bool, bool, bool) (this=0x613000082b80, node=warning: RTTI symbol not found for class &apos;WebCore::Text&apos;
..., baseRemoved=true, extentRemoved=true, startRemoved=true, endRemoved=true)
    at ../../Source/WebCore/editing/FrameSelection.cpp:560
#3  0x00007f65de7d55cf in WebCore::FrameSelection::nodeWillBeRemoved(WebCore::Node&amp;) (this=0x613000082b80, node=warning: RTTI symbol not found for class &apos;WebCore::Text&apos;
...) at ../../Source/WebCore/editing/FrameSelection.cpp:541
#4  0x00007f65de27be09 in WebCore::Document::nodeChildrenWillBeRemoved(WebCore::ContainerNode&amp;) (this=0x61f00001dc80, container=...) at ../../Source/WebCore/dom/Document.cpp:4816
#5  0x00007f65de1bc2bc in WebCore::ContainerNode::removeAllChildrenWithScriptAssertion(WebCore::ContainerNode::ChildChange::Source, WebCore::ContainerNode::DeferChildrenChanged)
    (this=0x60c0002ab500, source=WebCore::ContainerNode::ChildChange::Source::API, deferChildrenChanged=WebCore::ContainerNode::DeferChildrenChanged::No) at ../../Source/WebCore/dom/ContainerNode.cpp:120
#6  0x00007f65de1af59c in WebCore::ContainerNode::removeChildren() (this=0x60c0002ab500) at ../../Source/WebCore/dom/ContainerNode.cpp:715
#7  0x00007f65de1aef4f in WebCore::ContainerNode::replaceAll(WebCore::Node*) (this=0x60c0002ab500, node=0x0) at ../../Source/WebCore/dom/ContainerNode.cpp:670
#8  0x00007f65de5a6c0b in WebCore::Range::surroundContents(WebCore::Node&amp;) (this=0x607000103100, newParent=...) at ../../Source/WebCore/dom/Range.cpp:827
(rr) reverse-f
(rr) 
(rr) 
(rr) 
(rr) 
(rr) 
(rr) 
(rr) 
(rr) p showTree(newParent.document().selection().selection())
#document	0x61f00001dc80 (renderer 0x6160003ce480) 
	html	0x60c0002a6940 (renderer (nil))  (needs style recalc)
	HTML	0x60c0002a6a00 (renderer 0x61200007d740) 
		HTML	0x60c0002ab500 (renderer 0x61200006c1c0) 
			svg	0x61300008a0c0 (renderer 0x615000258d00) 
			svg	0x61300008a280 (renderer 0x615000258f80) 
SE			#text	0x60b0000e7a90 &quot;[&quot;
		DIV	0x60c0002aac00 (renderer 0x61200006c340) 
		HTML	0x60c0002aaa80 (renderer 0x61200006c4c0) 
start: legacy, offset, offset:0
end: legacy, offset, offset:0
$3 = void
(rr) n
(rr) p showTree(newParent.document().selection().selection())
#document	0x61f00001dc80 (renderer 0x6160003ce480) 
	html	0x60c0002a6940 (renderer (nil))  (needs style recalc)
	HTML	0x60c0002a6a00 (renderer 0x61200007d740) 
SE		HTML	0x60c0002ab500 (renderer 0x61200006c1c0) 
		DIV	0x60c0002aac00 (renderer 0x61200006c340) 
		HTML	0x60c0002aaa80 (renderer 0x61200006c4c0) 
start: offset, offset:2
end: offset, offset:2
$4 = void</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1765955</commentid>
    <comment_count>14</comment_count>
      <attachid>430341</attachid>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-06-02 06:31:53 -0700</bug_when>
    <thetext>Created attachment 430341
Patch for ASSERTION FAILED: startBlock-&gt;firstChild()</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1765956</commentid>
    <comment_count>15</comment_count>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-06-02 06:33:45 -0700</bug_when>
    <thetext>(In reply to Frédéric Wang (:fredw) from comment #13)
&gt; It removes children
&gt; of the inner HTML element and informs the doc about node removals, but for
&gt; some reason the selection is not updated properly.

The FrameSelection::respondToNodeModification does not seem to take into account upcoming removal of children when updating the selection, leaving it in a bad state. I uploaded a patch to work around that.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1765957</commentid>
    <comment_count>16</comment_count>
      <attachid>430342</attachid>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-06-02 06:47:15 -0700</bug_when>
    <thetext>Created attachment 430342
Patch for ASSERTION FAILED: refNode</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1767577</commentid>
    <comment_count>17</comment_count>
      <attachid>430341</attachid>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2021-06-07 15:11:55 -0700</bug_when>
    <thetext>Comment on attachment 430341
Patch for ASSERTION FAILED: startBlock-&gt;firstChild()

Looks like there are real test failures?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1767689</commentid>
    <comment_count>18</comment_count>
      <attachid>429872</attachid>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-06-08 00:20:27 -0700</bug_when>
    <thetext>Comment on attachment 429872
Add an assert for Position&apos;s offset

Not going to take this.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1767690</commentid>
    <comment_count>19</comment_count>
      <attachid>430342</attachid>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-06-08 00:20:47 -0700</bug_when>
    <thetext>Comment on attachment 430342
Patch for ASSERTION FAILED: refNode

This part is handled by bug 226527.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1768095</commentid>
    <comment_count>20</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2021-06-09 01:08:49 -0700</bug_when>
    <thetext>Looks like a bunch of tests are failing?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1768097</commentid>
    <comment_count>21</comment_count>
      <attachid>430341</attachid>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-06-09 01:21:57 -0700</bug_when>
    <thetext>Comment on attachment 430341
Patch for ASSERTION FAILED: startBlock-&gt;firstChild()

Yes, sorry I wanted to check this again later. removing review for now.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1768149</commentid>
    <comment_count>22</comment_count>
      <attachid>430956</attachid>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-06-09 05:47:46 -0700</bug_when>
    <thetext>Created attachment 430956
Patch for ASSERTION FAILED: startBlock-&gt;firstChild()</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1769729</commentid>
    <comment_count>23</comment_count>
      <attachid>431417</attachid>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-06-15 02:41:47 -0700</bug_when>
    <thetext>Created attachment 431417
Patch (fix offset)

This fixes the offset, but that actually does not help the bad determination of startBlock/canonicalPos in InsertParagraphSeparatorCommand::doApply()</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1769772</commentid>
    <comment_count>24</comment_count>
      <attachid>431430</attachid>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-06-15 06:12:43 -0700</bug_when>
    <thetext>Created attachment 431430
Tentative patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1769969</commentid>
    <comment_count>25</comment_count>
      <attachid>431430</attachid>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2021-06-15 14:59:27 -0700</bug_when>
    <thetext>Comment on attachment 431430
Tentative patch

View in context: https://bugs.webkit.org/attachment.cgi?id=431430&amp;action=review

&gt; Source/WebCore/editing/InsertParagraphSeparatorCommand.cpp:192
&gt; +    if (!startBlock-&gt;contains(visiblePos.deepEquivalent().containerNode()))
&gt; +        return;
&gt; +

Why do we need to do this?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1770089</commentid>
    <comment_count>26</comment_count>
      <attachid>431430</attachid>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-06-15 22:56:55 -0700</bug_when>
    <thetext>Comment on attachment 431430
Tentative patch

View in context: https://bugs.webkit.org/attachment.cgi?id=431430&amp;action=review

&gt;&gt; Source/WebCore/editing/InsertParagraphSeparatorCommand.cpp:192
&gt;&gt; +
&gt; 
&gt; Why do we need to do this?

Yeah, so let me summarize what&apos;s happening since it&apos;s a bit complicate. First, below are the values when startBlock/canonicalPos are initialized in InsertParagraphSeparatorCommand::doApply:

(rr) p showTree(insertionPosition)
#document	0x61f00001dc80 (renderer 0x6160003cf080) 
	html	0x60c0002a5d40 (renderer (nil))  (needs style recalc)
	HTML	0x60c0002a5e00 (renderer 0x61200007dbc0) 
*		HTML	0x60c0002aa900 (renderer 0x61200006c640) 
		#text	0x60b0000e8f30 &quot;0&quot;
		DIV	0x60c0002aa000 (renderer 0x61200006c7c0) 
		HTML	0x60c0002a9e80 (renderer 0x61200006c940) 
		HTML	0x60c0002b1080 (renderer 0x6120000916c0) 
offset, offset:2
$1 = void
(rr) p showTree(startBlock)
Cannot resolve function showTree to any overloaded instance
(rr) p showTree((Node*) startBlock)
#document	0x61f00001dc80 (renderer 0x6160003cf080) 
	html	0x60c0002a5d40 (renderer (nil))  (needs style recalc)
	HTML	0x60c0002a5e00 (renderer 0x61200007dbc0) 
*		HTML	0x60c0002aa900 (renderer 0x61200006c640) 
		#text	0x60b0000e8f30 &quot;0&quot;
		DIV	0x60c0002aa000 (renderer 0x61200006c7c0) 
		HTML	0x60c0002a9e80 (renderer 0x61200006c940) 
		HTML	0x60c0002b1080 (renderer 0x6120000916c0) 
$2 = void
(rr) p showTree(canonicalPos)
#document	0x61f00001dc80 (renderer 0x6160003cf080) 
	html	0x60c0002a5d40 (renderer (nil))  (needs style recalc)
	HTML	0x60c0002a5e00 (renderer 0x61200007dbc0) 
		HTML	0x60c0002aa900 (renderer 0x61200006c640) 
*		#text	0x60b0000e8f30 &quot;0&quot;
		DIV	0x60c0002aa000 (renderer 0x61200006c7c0) 
		HTML	0x60c0002a9e80 (renderer 0x61200006c940) 
		HTML	0x60c0002b1080 (renderer 0x6120000916c0) 
legacy, offset, offset:0
$3 = void

Note that insertionPosition is in a bad state (empty &lt;html&gt; anchor node but offset equal to 2). This is explained and fixed by attachment 431417 and I believe we can just rebase the expectation of the failing test if we want to take it, but that&apos;s really a separate issue here anyway...

For this testcase, we have the same output for insertionPosition/visiblePos when visiblePos is initialized a few lines below. But the bad state of insertionPosition gets fixed by the upstream/downstream move.

The interesting thing here is that startBlock is on the &lt;html&gt; element but the visible position is on the #text next sibling. The latter happens because Position::isCandidate() -- and a fortiori VisiblePosition::canonicalPosition() and VisiblePosition::VisiblePosition() -- skips &lt;html&gt; elements. This finally leads to the ASSERT failure, as explained in the preliminary debugging of comment 10.

My understanding of the function (reading the apparent assumption of the comments e.g. the one before the ASSERT hit here) is that it is wrong to have the visible position outside the startBlock. So attachment 431430 just performs an early return if that happens and that indeed fixes the issue without breaking any existing test on EWS.

I also tried to fallback to applyCommandToComposite when the startBlock is &lt;html&gt; (since that&apos;s leading to special treatment for the calculation of the visible pos and booleans). However, that&apos;s causing another ASSERT in that case, IIRC that the position is not editable.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1770170</commentid>
    <comment_count>27</comment_count>
      <attachid>431541</attachid>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-06-16 06:53:21 -0700</bug_when>
    <thetext>Created attachment 431541
Patch

Here is a real patch with test changelog &amp; test.

Reducing the test was a bit tricky because event_handler_538_DOMNodeRemoved was called several times. It still not perfect, but I was not able to reduce it more.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1774664</commentid>
    <comment_count>28</comment_count>
      <attachid>432849</attachid>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-07-03 06:12:24 -0700</bug_when>
    <thetext>Created attachment 432849
Patch (attempt to rebuild the dom tree and selection before crash)

For the record, this is the follow-up work I tried to do on the test. I get the following assert messages:

CONSOLE MESSAGE: bad anchorNode: [object Text]
CONSOLE MESSAGE: bad anchorOffset: 0
CONSOLE MESSAGE: bad focusNode: [object Text]
CONSOLE MESSAGE: bad focusOffset: 0

I can build the same DOM tree. As expected, I cannot set the invalid offset 2 but as previously explained that shouldn&apos;t matter here. However, I fail to set the anchor/focus on the inner &lt;html&gt; node, as that&apos;s the case with complex path with event handlers. Instead a text node is selected. 

So I&apos;m not sure I can reduce this testcase further.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1779547</commentid>
    <comment_count>29</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2021-07-26 13:47:38 -0700</bug_when>
    <thetext>Committed r280312 (239962@main): &lt;https://commits.webkit.org/239962@main&gt;

All reviewed patches have been landed. Closing bug and clearing flags on attachment 431541.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>426906</attachid>
            <date>2021-04-23 07:49:17 -0700</date>
            <delta_ts>2021-04-23 07:49:17 -0700</delta_ts>
            <desc>Minimal test case</desc>
            <filename>insertParagraphSeparatorCommandDoApply.html</filename>
            <type>text/html</type>
            <size>4070</size>
            <attacher name="Ali Juma">ajuma</attacher>
            
              <data encoding="base64">PCFET0NUWVBFIGh0bWw+PHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPg0KdmFyIGV2ZW50
X2hhbmRsZXJfNTM4X0RPTU5vZGVSZW1vdmVkX2FjdGl2ZSA9IGZhbHNlOw0KZnVuY3Rpb24gZXZl
bnRfaGFuZGxlcl81MzhfRE9NTm9kZVJlbW92ZWQoKSB7DQogIGlmIChldmVudF9oYW5kbGVyXzUz
OF9ET01Ob2RlUmVtb3ZlZF9hY3RpdmUpIHJldHVybiA7DQogIGV2ZW50X2hhbmRsZXJfNTM4X0RP
TU5vZGVSZW1vdmVkX2FjdGl2ZSA9IHRydWU7DQogIHZhciBvRWxlbWVudCA9IGV2ZW50LnNyY0Vs
ZW1lbnQ7DQogIHZhciBvU2VsZWN0aW9uPXdpbmRvdy5nZXRTZWxlY3Rpb24oKTsNCiAgaWYgKCFv
U2VsZWN0aW9uLnJhbmdlQ291bnQpIHsNCiAgZG9jdW1lbnQuZXhlY0NvbW1hbmQoIlNlbGVjdEFs
bCIpDQogIH0NCiAgdmFyIG9SYW5nZSA9IG9TZWxlY3Rpb24ucmFuZ2VDb3VudCA/IG9TZWxlY3Rp
b24uZ2V0UmFuZ2VBdCg1NCAlIG9TZWxlY3Rpb24ucmFuZ2VDb3VudCkgOiBudWxsOw0KICAgIHZh
ciBvUGFyZW50RWxlbWVudCA9ZnVuY3Rpb24oKXsNCiAgICB2YXIgYW9FbGVtZW50cyA9IGRvY3Vt
ZW50LmdldEVsZW1lbnRzQnlUYWdOYW1lKCIqIik7DQogICAgaWYgKGFvRWxlbWVudHMubGVuZ3Ro
KSByZXR1cm4gYW9FbGVtZW50c1s3MCAlIGFvRWxlbWVudHMubGVuZ3RoXTsNCiAgfSgpOw0KICAg
ICAgdHJ5e29SYW5nZS5zdXJyb3VuZENvbnRlbnRzKG9QYXJlbnRFbGVtZW50KX0NCiAgY2F0Y2go
ZSl7fQ0KICBkb2N1bWVudC5leGVjQ29tbWFuZCgnSW5zZXJ0UGFyYWdyYXBoJyk7DQogIGlmICgh
b0VsZW1lbnQucGFyZW50Tm9kZSkgew0KICAgIHZhciBvUGFyZW50ID1mdW5jdGlvbigpew0KICAg
IHZhciBhb0VsZW1lbnRzID0gZG9jdW1lbnQuZ2V0RWxlbWVudHNCeVRhZ05hbWUoIioiKTsNCiAg
ICBpZiAoYW9FbGVtZW50cy5sZW5ndGgpIHJldHVybiBhb0VsZW1lbnRzWzIwICUgYW9FbGVtZW50
cy5sZW5ndGhdOw0KICB9KCk7DQogICAgICB2YXIgb1ByZXZpb3VzU2libGluZyA9IG9QYXJlbnQu
Y2hpbGROb2Rlc1sxNCAlIG9QYXJlbnQuY2hpbGROb2Rlcy5sZW5ndGhdOw0KICAgICAgaWYgKG9Q
cmV2aW91c1NpYmxpbmcpIHsNCiAgICAgIH0gZWxzZSB7DQpvUGFyZW50LmFwcGVuZENoaWxkKG9F
bGVtZW50KQ0KICAgICAgfQ0KICB9DQpvRWxlbWVudCA9IGRvY3VtZW50LmltcG9ydE5vZGUob0Vs
ZW1lbnQpDQogICAgdmFyIG9QYXJlbnQgPWZ1bmN0aW9uKCl7DQogICAgdmFyIGFvRWxlbWVudHMg
PSBkb2N1bWVudC5nZXRFbGVtZW50c0J5VGFnTmFtZSgiKiIpOw0KICAgIGlmIChhb0VsZW1lbnRz
Lmxlbmd0aCkgcmV0dXJuIGFvRWxlbWVudHNbMTYgJSBhb0VsZW1lbnRzLmxlbmd0aF07DQogIH0o
KTsNCiAgICAgIGlmIChvUHJldmlvdXNTaWJsaW5nKSB7DQogICAgICB9IGVsc2Ugew0Kb1BhcmVu
dC5hcHBlbmRDaGlsZChvRWxlbWVudCkNCiAgICAgIH0NCm9FbGVtZW50Lmluc2VydEFkamFjZW50
SFRNTCgnYmVmb3JlZW5kJywgIjxzdmc+PC9zdmc+PHN2Zz48L3N2Zz48ZmllbGRzZXQ+RERRJSUl
JSUlJTNlaWlpaWlpaWlpaWk6Ojo6Xlt9eXQ8L2ZpZWxkc2V0PjxzPjwvcz48aHRtbD5iYmJiYiQk
OUFBQUFBQWtbfCctLS0tLS0tVz58fHx8fDwvaHRtbD4iKQ0KICBldmVudF9oYW5kbGVyXzUzOF9E
T01Ob2RlUmVtb3ZlZF9hY3RpdmUgPSBmYWxzZTsNCn0NCmRvY3VtZW50LmFkZEV2ZW50TGlzdGVu
ZXIoIkRPTU5vZGVSZW1vdmVkIiwgZXZlbnRfaGFuZGxlcl81MzhfRE9NTm9kZVJlbW92ZWQpOw0K
c2V0VGltZW91dChmdW5jdGlvbigpew0KICB2YXIgb1NlbGVjdGlvbj13aW5kb3cuZ2V0U2VsZWN0
aW9uKCk7DQogIHZhciBvRWxlbWVudCA9ZnVuY3Rpb24oKXsNCiAgfTsNCiAgICBpZiAob1BhcmVu
dCkgew0KICAgICAgdmFyIG9QcmV2aW91c1NpYmxpbmcgPSBvUGFyZW50LmNoaWxkTm9kZXNbMTYg
JSBvUGFyZW50LmNoaWxkTm9kZXMubGVuZ3RoXTsNCiAgICB9DQogIHZhciBvRWxlbWVudCA9ZnVu
Y3Rpb24oKXsNCiAgICB2YXIgYW9FbGVtZW50cyA9IGRvY3VtZW50LmdldEVsZW1lbnRzQnlUYWdO
YW1lKCIqIik7DQogICAgaWYgKGFvRWxlbWVudHMubGVuZ3RoKSByZXR1cm4gYW9FbGVtZW50c1sw
ICUgYW9FbGVtZW50cy5sZW5ndGhdOw0KICB9KCk7DQpvRWxlbWVudC5pbm5lckhUTUwgPSAnPGJ1
dHRvbj48c2NyaXB0PjxcXC9zY3JpcHQ+PC9idXR0b24+PGNhbnZhcz48L2NhbnZhcz48dGl0bGUv
PjxoNT4qKiorKytwQls7KysrKysrK19fUXoiIiIiIiIiIiIiIjwvaDU+Jw0Kb1NlbGVjdGlvbi5k
ZWxldGVGcm9tRG9jdW1lbnQoKQ0Kb0VsZW1lbnQuYXBwZW5kQ2hpbGQoKGZ1bmN0aW9uKCl7DQog
ICAgdmFyIGFvRWxlbWVudHMgPSBkb2N1bWVudC5nZXRFbGVtZW50c0J5VGFnTmFtZSgiKiIpOw0K
ICAgICAgICByZXR1cm4gYW9FbGVtZW50c1s2MSAlIGFvRWxlbWVudHMubGVuZ3RoXS5jbG9uZU5v
ZGUoKTsNCiAgfSkoKSkNCiAgdmFyIG9SYW5nZSA9IG9TZWxlY3Rpb24ucmFuZ2VDb3VudCA/IG9T
ZWxlY3Rpb24uZ2V0UmFuZ2VBdCg4MiAlIG9TZWxlY3Rpb24ucmFuZ2VDb3VudCkgOiBudWxsOw0K
ICB2YXIgb0VsZW1lbnQgPWZ1bmN0aW9uKCl7DQogICAgdmFyIGFvRWxlbWVudHMgPSBkb2N1bWVu
dC5nZXRFbGVtZW50c0J5VGFnTmFtZSgiKiIpOw0KICAgIGlmIChhb0VsZW1lbnRzLmxlbmd0aCkg
cmV0dXJuIGFvRWxlbWVudHNbMzkgJSBhb0VsZW1lbnRzLmxlbmd0aF07DQogIH0oKTsNCm9FbGVt
ZW50LmNvbnRlbnRFZGl0YWJsZSA9IG9FbGVtZW50LmNvbnRlbnRFZGl0YWJsZSA9PSAidHJ1ZSIg
PyAiZmFsc2UiIDogInRydWUiOw0Kb0VsZW1lbnQucGFyZW50Tm9kZS5yZXBsYWNlQ2hpbGQoZG9j
dW1lbnQuY3JlYXRlRWxlbWVudE5TKCdodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZycsICd0ZXh0
JyksIG9FbGVtZW50KQ0KICAgIHZhciBvUGFyZW50ID1mdW5jdGlvbigpew0KICAgIHZhciBhb0Vs
ZW1lbnRzID0gZG9jdW1lbnQuZ2V0RWxlbWVudHNCeVRhZ05hbWUoIioiKTsNCiAgICBpZiAoYW9F
bGVtZW50cy5sZW5ndGgpIHJldHVybiBhb0VsZW1lbnRzWzQxICUgYW9FbGVtZW50cy5sZW5ndGhd
Ow0KICB9KCk7DQogICAgICBpZiAob1ByZXZpb3VzU2libGluZykgew0KICAgICAgfSBlbHNlIHsN
Cm9QYXJlbnQuYXBwZW5kQ2hpbGQob0VsZW1lbnQpDQogICAgICB9DQpvU2VsZWN0aW9uLmNvbGxh
cHNlVG9TdGFydCgpDQogICAgdmFyIG9QYXJlbnRFbGVtZW50ID1mdW5jdGlvbigpew0KICAgIHZh
ciBhb0VsZW1lbnRzID0gZG9jdW1lbnQuZ2V0RWxlbWVudHNCeVRhZ05hbWUoIioiKTsNCiAgICBp
ZiAoYW9FbGVtZW50cy5sZW5ndGgpIHJldHVybiBhb0VsZW1lbnRzWzk3ICUgYW9FbGVtZW50cy5s
ZW5ndGhdOw0KICB9KCk7DQogICAgICB0cnl7b1JhbmdlLnN1cnJvdW5kQ29udGVudHMob1BhcmVu
dEVsZW1lbnQpfQ0KICBjYXRjaChlKXt9DQogIGRvY3VtZW50LmV4ZWNDb21tYW5kKCdJbnNlcnRP
cmRlcmVkTGlzdCcpOw0KICB2YXIgb0VsZW1lbnQgPWZ1bmN0aW9uKCl7DQogICAgdmFyIGFvRWxl
bWVudHMgPSBkb2N1bWVudC5nZXRFbGVtZW50c0J5VGFnTmFtZSgiKiIpOw0KICAgIGlmIChhb0Vs
ZW1lbnRzLmxlbmd0aCkgcmV0dXJuIGFvRWxlbWVudHNbMjkgJSBhb0VsZW1lbnRzLmxlbmd0aF07
DQogIH0oKTsNCm9FbGVtZW50Lmluc2VydEFkamFjZW50VGV4dCgnYWZ0ZXJlbmQnLCAnMj9vb29v
b29vb29vb28qJC48KlU6Ojo6OjY2NjY2NjAnKQ0Kb0VsZW1lbnQgPSBkb2N1bWVudC5pbXBvcnRO
b2RlKG9FbGVtZW50KQ0KICAgIHZhciBvUGFyZW50ID1mdW5jdGlvbigpew0KICAgIHZhciBhb0Vs
ZW1lbnRzID0gZG9jdW1lbnQuZ2V0RWxlbWVudHNCeVRhZ05hbWUoIioiKTsNCiAgICBpZiAoYW9F
bGVtZW50cy5sZW5ndGgpIHJldHVybiBhb0VsZW1lbnRzWzI1ICUgYW9FbGVtZW50cy5sZW5ndGhd
Ow0KICB9KCk7DQogICAgICBpZiAob1ByZXZpb3VzU2libGluZykgew0KICAgICAgfSBlbHNlIHsN
Cm9QYXJlbnQuYXBwZW5kQ2hpbGQob0VsZW1lbnQpDQogICAgICB9DQpvRWxlbWVudC5vdXRlckhU
TUwgPSAiIg0KfSk7DQo8L3NjcmlwdD4=
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>429009</attachid>
            <date>2021-05-18 17:45:35 -0700</date>
            <delta_ts>2021-06-09 04:53:27 -0700</delta_ts>
            <desc>Reduction (ASSERTION FAILED: refNode) -- fixed in bug 226527</desc>
            <filename>77270374.html</filename>
            <type>text/html</type>
            <size>361</size>
            <attacher name="Ryosuke Niwa">rniwa</attacher>
            
              <data encoding="base64">PHN0eWxlPgogICNsYXN0OjpiZWZvcmUgewogICAgY29udGVudDogJy4nOwogIH0KPC9zdHlsZT4K
PHNjcmlwdD4KICBvbmxvYWQgPSAoKSA9PiB7CiAgICBnZXRTZWxlY3Rpb24oKS5zZXRCYXNlQW5k
RXh0ZW50KGRvY3VtZW50LnF1ZXJ5U2VsZWN0b3IoJ2ltZycpLCAxLCBkb2N1bWVudC5xdWVyeVNl
bGVjdG9yKCcjbGFzdCcpLCAwKTsKICAgIGRvY3VtZW50LmV4ZWNDb21tYW5kKCdJbnNlcnRQYXJh
Z3JhcGgnKTsKICB9Owo8L3NjcmlwdD4KPGJvZHkgY29udGVudGVkaXRhYmxlIHN0eWxlPSJkaXNw
bGF5OiB0YWJsZSI+PGltZyBzdHlsZT0iY29udGVudDogJyciPjxkaXY+PC9kaXY+PGRpdiBpZD0i
bGFzdCI+PC9kaXY+PC9ib2R5Pg==
</data>

          </attachment>
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>429534</attachid>
            <date>2021-05-24 08:31:25 -0700</date>
            <delta_ts>2021-06-02 06:47:15 -0700</delta_ts>
            <desc>tentative patch for attachment 429009</desc>
            <filename>0001-Bug-224977-Crash-in-InsertParagraphSeparatorCommand-.patch</filename>
            <type>text/plain</type>
            <size>2756</size>
            <attacher name="Frédéric Wang Nélar">fred.wang</attacher>
            
              <data encoding="base64">RnJvbSBhOGZmNmY5YjQ4NzM0MzhmYTdjMzRjZGQ4ZmM1M2JlYWI0MzZkZDgzIE1vbiBTZXAgMTcg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</data>
<flag name="commit-queue"
          id="450779"
          type_id="3"
          status="-"
          setter="ews-feeder"
    />
          </attachment>
          <attachment
              isobsolete="1"
              ispatch="0"
              isprivate="0"
          >
            <attachid>429664</attachid>
            <date>2021-05-25 10:24:01 -0700</date>
            <delta_ts>2021-05-26 03:31:58 -0700</delta_ts>
            <desc>Reduce a bit the second issue</desc>
            <filename>bug224977-issue2.html</filename>
            <type>text/html</type>
            <size>2149</size>
            <attacher name="Frédéric Wang Nélar">fred.wang</attacher>
            
              <data encoding="base64">PCFET0NUWVBFIGh0bWw+PHNjcmlwdD48L3NjcmlwdD48c2NyaXB0IHR5cGU9InRleHQvamF2YXNj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</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>429744</attachid>
            <date>2021-05-26 03:31:58 -0700</date>
            <delta_ts>2021-05-27 06:59:15 -0700</delta_ts>
            <desc>Reduction (ASSERTION FAILED: startBlock-&gt;firstChild())</desc>
            <filename>bug224977-issue2.html</filename>
            <type>text/html</type>
            <size>1851</size>
            <attacher name="Frédéric Wang Nélar">fred.wang</attacher>
            
              <data encoding="base64">PCFET0NUWVBFIGh0bWw+CjxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0Ij4KICByZXF1ZXN0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</data>

          </attachment>
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>429867</attachid>
            <date>2021-05-27 04:36:11 -0700</date>
            <delta_ts>2021-05-27 06:18:55 -0700</delta_ts>
            <desc>Add an assert for Position&apos;s offset</desc>
            <filename>position-assert.patch</filename>
            <type>text/plain</type>
            <size>535</size>
            <attacher name="Frédéric Wang Nélar">fred.wang</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL2RvbS9Qb3NpdGlvbi5jcHAgYi9Tb3VyY2UvV2Vi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</data>
<flag name="commit-queue"
          id="451152"
          type_id="3"
          status="-"
          setter="ews-feeder"
    />
          </attachment>
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>429872</attachid>
            <date>2021-05-27 05:56:06 -0700</date>
            <delta_ts>2021-06-08 00:20:27 -0700</delta_ts>
            <desc>Add an assert for Position&apos;s offset</desc>
            <filename>position-assert.patch</filename>
            <type>text/plain</type>
            <size>537</size>
            <attacher name="Frédéric Wang Nélar">fred.wang</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL2RvbS9Qb3NpdGlvbi5jcHAgYi9Tb3VyY2UvV2Vi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</data>

          </attachment>
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>430341</attachid>
            <date>2021-06-02 06:31:53 -0700</date>
            <delta_ts>2021-06-09 05:47:57 -0700</delta_ts>
            <desc>Patch for ASSERTION FAILED: startBlock-&gt;firstChild()</desc>
            <filename>0001-Bug-224977-ASSERTION-FAILED-startBlock-firstChild.patch</filename>
            <type>text/plain</type>
            <size>8947</size>
            <attacher name="Frédéric Wang Nélar">fred.wang</attacher>
            
              <data encoding="base64">RnJvbSA2MjM2ZWZjYmUyNTMxNTA3ZTk3ZjI5YjMwYzNjMTZlNTU2ZTQyYWYwIE1vbiBTZXAgMTcg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==
</data>
<flag name="commit-queue"
          id="451767"
          type_id="3"
          status="-"
          setter="ews-feeder"
    />
          </attachment>
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>430342</attachid>
            <date>2021-06-02 06:47:15 -0700</date>
            <delta_ts>2021-06-08 00:20:58 -0700</delta_ts>
            <desc>Patch for ASSERTION FAILED: refNode</desc>
            <filename>0001-Bug-224977-ASSERTION-FAILED-refNode.patch</filename>
            <type>text/plain</type>
            <size>4676</size>
            <attacher name="Frédéric Wang Nélar">fred.wang</attacher>
            
              <data encoding="base64">RnJvbSA0MWE5MGI4ZWRkNWJkM2YzMzRmYzkzMGM2ODgwYjE1MTg5NjU2N2IwIE1vbiBTZXAgMTcg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</data>
<flag name="review"
          id="451759"
          type_id="1"
          status="+"
          setter="rniwa"
    />
          </attachment>
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>430956</attachid>
            <date>2021-06-09 05:47:46 -0700</date>
            <delta_ts>2021-06-09 06:04:15 -0700</delta_ts>
            <desc>Patch for ASSERTION FAILED: startBlock-&gt;firstChild()</desc>
            <filename>0001-Bug-224977-ASSERTION-FAILED-startBlock-firstChild.patch</filename>
            <type>text/plain</type>
            <size>12037</size>
            <attacher name="Frédéric Wang Nélar">fred.wang</attacher>
            
              <data encoding="base64">RnJvbSBmYjMzZmRiMmJjM2VmMDE4YjM3NjRmZDI2ZWUzMDIzOTljYTg2NGQxIE1vbiBTZXAgMTcg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</data>
<flag name="commit-queue"
          id="452587"
          type_id="3"
          status="-"
          setter="ews-feeder"
    />
          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>431417</attachid>
            <date>2021-06-15 02:41:47 -0700</date>
            <delta_ts>2021-06-15 06:12:55 -0700</delta_ts>
            <desc>Patch (fix offset)</desc>
            <filename>0001-Bug-224977-ASSERTION-FAILED-startBlock-firstChild.patch</filename>
            <type>text/plain</type>
            <size>7856</size>
            <attacher name="Frédéric Wang Nélar">fred.wang</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZyBiL1NvdXJjZS9XZWJDb3JlL0No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=
</data>
<flag name="commit-queue"
          id="453200"
          type_id="3"
          status="-"
          setter="ews-feeder"
    />
          </attachment>
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>431430</attachid>
            <date>2021-06-15 06:12:43 -0700</date>
            <delta_ts>2021-06-16 06:53:21 -0700</delta_ts>
            <desc>Tentative patch</desc>
            <filename>0001-224977.patch</filename>
            <type>text/plain</type>
            <size>961</size>
            <attacher name="Frédéric Wang Nélar">fred.wang</attacher>
            
              <data encoding="base64">RnJvbSBmNzY5Mzc5MzcxMzIwOGM0MGEzM2NkMWYyN2E2MDJlMThjMGIyMWJjIE1vbiBTZXAgMTcg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==
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>431541</attachid>
            <date>2021-06-16 06:53:21 -0700</date>
            <delta_ts>2021-07-26 13:47:39 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>0001-224977.patch</filename>
            <type>text/plain</type>
            <size>6278</size>
            <attacher name="Frédéric Wang Nélar">fred.wang</attacher>
            
              <data encoding="base64">RnJvbSBlNmJiZDQxMzRmM2VhOTk1YTUxMTE4ODE0OTcxODA1ZGIyNTg3ODY0IE1vbiBTZXAgMTcg
MDA6MDA6MDAgMjAwMQpGcm9tOiA9P1VURi04P3E/RnI9QzM9QTlkPUMzPUE5cmljPTIwV2FuZz89
IDxmd2FuZ0BpZ2FsaWEuY29tPgpEYXRlOiBUdWUsIDE1IEp1biAyMDIxIDE1OjExOjQ4ICswMjAw
ClN1YmplY3Q6IFtQQVRDSF0gMjI0OTc3CgotLS0KIExheW91dFRlc3RzL0NoYW5nZUxvZyAgICAg
ICAgICAgICAgICAgICAgICAgICB8IDEyICsrKysrCiAuLi5hdG9yLXdpdGgtaHRtbC1lbGVtZW50
cy1jcmFzaC1leHBlY3RlZC50eHQgfCAgMyArKwogLi4ucGgtc2VwYXJhdG9yLXdpdGgtaHRtbC1l
bGVtZW50cy1jcmFzaC5odG1sIHwgNDYgKysrKysrKysrKysrKysrKysrKwogU291cmNlL1dlYkNv
cmUvQ2hhbmdlTG9nICAgICAgICAgICAgICAgICAgICAgIHwgMjAgKysrKysrKysKIC4uLi9JbnNl
cnRQYXJhZ3JhcGhTZXBhcmF0b3JDb21tYW5kLmNwcCAgICAgICB8ICAzICsrCiA1IGZpbGVzIGNo
YW5nZWQsIDg0IGluc2VydGlvbnMoKykKIGNyZWF0ZSBtb2RlIDEwMDY0NCBMYXlvdXRUZXN0cy9l
ZGl0aW5nL2luc2VydGluZy9pbnNlcnQtcGFyYWdyYXBoLXNlcGFyYXRvci13aXRoLWh0bWwtZWxl
bWVudHMtY3Jhc2gtZXhwZWN0ZWQudHh0CiBjcmVhdGUgbW9kZSAxMDA2NDQgTGF5b3V0VGVzdHMv
ZWRpdGluZy9pbnNlcnRpbmcvaW5zZXJ0LXBhcmFncmFwaC1zZXBhcmF0b3Itd2l0aC1odG1sLWVs
ZW1lbnRzLWNyYXNoLmh0bWwKCmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cgYi9M
YXlvdXRUZXN0cy9DaGFuZ2VMb2cKaW5kZXggMjU2NzJjYTE1My4uMDFmMjgyYWUwNyAxMDA2NDQK
LS0tIGEvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCisrKyBiL0xheW91dFRlc3RzL0NoYW5nZUxvZwpA
QCAtMSwzICsxLDE1IEBACisyMDIxLTA2LTE2ICBGcsOpZMOpcmljIFdhbmcgIDxmd2FuZ0BpZ2Fs
aWEuY29tPgorCisgICAgICAgIENyYXNoIGluIEluc2VydFBhcmFncmFwaFNlcGFyYXRvckNvbW1h
bmQ6OmRvQXBwbHkKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dp
P2lkPTIyNDk3NworCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAg
ICAgIEFkZCByZWdyZXNzaW9uIHRlc3QuCisKKyAgICAgICAgKiBlZGl0aW5nL2luc2VydGluZy9p
bnNlcnQtcGFyYWdyYXBoLXNlcGFyYXRvci13aXRoLWh0bWwtZWxlbWVudHMtY3Jhc2gtZXhwZWN0
ZWQudHh0OiBBZGRlZC4KKyAgICAgICAgKiBlZGl0aW5nL2luc2VydGluZy9pbnNlcnQtcGFyYWdy
YXBoLXNlcGFyYXRvci13aXRoLWh0bWwtZWxlbWVudHMtY3Jhc2guaHRtbDogQWRkZWQuCisKIDIw
MjEtMDYtMTMgIEZ1amlpIEhpcm9ub3JpICA8SGlyb25vcmkuRnVqaWlAc29ueS5jb20+CiAKICAg
ICAgICAgW1dpbkNhaXJvXSBVbnJldmlld2VkIHRlc3QgZ2FyZGVuaW5nCmRpZmYgLS1naXQgYS9M
YXlvdXRUZXN0cy9lZGl0aW5nL2luc2VydGluZy9pbnNlcnQtcGFyYWdyYXBoLXNlcGFyYXRvci13
aXRoLWh0bWwtZWxlbWVudHMtY3Jhc2gtZXhwZWN0ZWQudHh0IGIvTGF5b3V0VGVzdHMvZWRpdGlu
Zy9pbnNlcnRpbmcvaW5zZXJ0LXBhcmFncmFwaC1zZXBhcmF0b3Itd2l0aC1odG1sLWVsZW1lbnRz
LWNyYXNoLWV4cGVjdGVkLnR4dApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwMDAw
Li5iNWYwMjlkMjQ5Ci0tLSAvZGV2L251bGwKKysrIGIvTGF5b3V0VGVzdHMvZWRpdGluZy9pbnNl
cnRpbmcvaW5zZXJ0LXBhcmFncmFwaC1zZXBhcmF0b3Itd2l0aC1odG1sLWVsZW1lbnRzLWNyYXNo
LWV4cGVjdGVkLnR4dApAQCAtMCwwICsxLDMgQEAKK0NPTlNPTEUgTUVTU0FHRTogVGhlIHRlc3Qg
UEFTUyBpZiBpdCBkb2VzIG5vdCBjcmFzaC4KKzAKKwpkaWZmIC0tZ2l0IGEvTGF5b3V0VGVzdHMv
ZWRpdGluZy9pbnNlcnRpbmcvaW5zZXJ0LXBhcmFncmFwaC1zZXBhcmF0b3Itd2l0aC1odG1sLWVs
ZW1lbnRzLWNyYXNoLmh0bWwgYi9MYXlvdXRUZXN0cy9lZGl0aW5nL2luc2VydGluZy9pbnNlcnQt
cGFyYWdyYXBoLXNlcGFyYXRvci13aXRoLWh0bWwtZWxlbWVudHMtY3Jhc2guaHRtbApuZXcgZmls
ZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwMDAwLi40ZWEzZDM3ZjgxCi0tLSAvZGV2L251bGwK
KysrIGIvTGF5b3V0VGVzdHMvZWRpdGluZy9pbnNlcnRpbmcvaW5zZXJ0LXBhcmFncmFwaC1zZXBh
cmF0b3Itd2l0aC1odG1sLWVsZW1lbnRzLWNyYXNoLmh0bWwKQEAgLTAsMCArMSw0NiBAQAorPCFE
T0NUWVBFIGh0bWw+Cis8c2NyaXB0IHR5cGU9InRleHQvamF2YXNjcmlwdCI+CisgIGlmICh3aW5k
b3cudGVzdFJ1bm5lcikKKyAgICAgIHRlc3RSdW5uZXIuZHVtcEFzVGV4dCgpOworICBjb25zb2xl
LmxvZygnVGhlIHRlc3QgUEFTUyBpZiBpdCBkb2VzIG5vdCBjcmFzaC4nKQorICByZXF1ZXN0QW5p
bWF0aW9uRnJhbWUoZnVuY3Rpb24oKSB7CisgICAgICBkb2N1bWVudC5kb2N1bWVudEVsZW1lbnQu
YWRkRXZlbnRMaXN0ZW5lcigiRE9NTm9kZVJlbW92ZWQiLCBmdW5jdGlvbigpIHsKKyAgICAgICAg
ICBkb2N1bWVudC5leGVjQ29tbWFuZCgiU2VsZWN0QWxsIik7CisgICAgICAgICAgd2luZG93Lmdl
dFNlbGVjdGlvbigpLgorICAgICAgICAgICAgICBnZXRSYW5nZUF0KDApLnN1cnJvdW5kQ29udGVu
dHMoZG9jdW1lbnQuaGVhZC5maXJzdEVsZW1lbnRDaGlsZCk7CisgICAgICAgICAgZG9jdW1lbnQu
Ym9keS5pbnNlcnRBZGphY2VudEhUTUwoJ2JlZm9yZWVuZCcsICIiKTsKKyAgICAgIH0sIHtvbmNl
OiB0cnVlfSk7CisgICAgICBkb2N1bWVudC5kb2N1bWVudEVsZW1lbnQuaW5uZXJIVE1MID0gJyc7
CisKKyAgICAgIHdpbmRvdy5nZXRTZWxlY3Rpb24oKS5kZWxldGVGcm9tRG9jdW1lbnQoKTsKKyAg
ICAgIGRvY3VtZW50LmRvY3VtZW50RWxlbWVudC5hcHBlbmRDaGlsZChkb2N1bWVudC5kb2N1bWVu
dEVsZW1lbnQuY2xvbmVOb2RlKCkpOworICAgICAgdmFyIG9FbGVtZW50ID0gZG9jdW1lbnQuZG9j
dW1lbnRFbGVtZW50LmZpcnN0RWxlbWVudENoaWxkOworICAgICAgb0VsZW1lbnQuY29udGVudEVk
aXRhYmxlID0gdHJ1ZTsKKworICAgICAgZG9jdW1lbnQuZG9jdW1lbnRFbGVtZW50LmFkZEV2ZW50
TGlzdGVuZXIoIkRPTU5vZGVSZW1vdmVkIiwgZnVuY3Rpb24oKSB7CisgICAgICAgICAgdmFyIGVs
ID0gZG9jdW1lbnQuZG9jdW1lbnRFbGVtZW50LmZpcnN0RWxlbWVudENoaWxkOworICAgICAgICAg
IGRvY3VtZW50LmRvY3VtZW50RWxlbWVudC5hcHBlbmRDaGlsZChlbCk7CisgICAgICAgICAgZWwg
PSBkb2N1bWVudC5pbXBvcnROb2RlKGVsKTsKKyAgICAgICAgICBkb2N1bWVudC5kb2N1bWVudEVs
ZW1lbnQuYXBwZW5kQ2hpbGQoZWwpOworICAgICAgICAgIGVsLmluc2VydEFkamFjZW50SFRNTCgn
YmVmb3JlZW5kJywgIjxzdmc+PC9zdmc+PHN2Zz48L3N2Zz5bIik7CisgICAgICB9LCB7b25jZTog
dHJ1ZX0pOworICAgICAgZG9jdW1lbnQuZG9jdW1lbnRFbGVtZW50LgorICAgICAgICAgIHJlcGxh
Y2VDaGlsZChkb2N1bWVudC5jcmVhdGVFbGVtZW50KCdkaXYnKSwgb0VsZW1lbnQpOworCisgICAg
ICBkb2N1bWVudC5kb2N1bWVudEVsZW1lbnQuYXBwZW5kQ2hpbGQob0VsZW1lbnQpOworICAgICAg
d2luZG93LmdldFNlbGVjdGlvbigpLmNvbGxhcHNlVG9TdGFydCgpOworICAgICAgdHJ5IHsKKyAg
ICAgICAgICB3aW5kb3cuZ2V0U2VsZWN0aW9uKCkuZ2V0UmFuZ2VBdCgwKS4KKyAgICAgICAgICAg
ICAgc3Vycm91bmRDb250ZW50cyhkb2N1bWVudC5kb2N1bWVudEVsZW1lbnQuZmlyc3RFbGVtZW50
Q2hpbGQpOworICAgICAgfSBjYXRjaCAoZSkge30KKyAgICAgIGRvY3VtZW50LmV4ZWNDb21tYW5k
KCdJbnNlcnRPcmRlcmVkTGlzdCcpOworICAgICAgb0VsZW1lbnQgPSBkb2N1bWVudC5kb2N1bWVu
dEVsZW1lbnQuZmlyc3RFbGVtZW50Q2hpbGQ7CisgICAgICBvRWxlbWVudC5pbnNlcnRBZGphY2Vu
dFRleHQoJ2FmdGVyZW5kJywgJzAnKTsKKyAgICAgIGRvY3VtZW50LmRvY3VtZW50RWxlbWVudC5h
cHBlbmRDaGlsZChkb2N1bWVudC5pbXBvcnROb2RlKG9FbGVtZW50KSk7CisKKyAgICAgIGRvY3Vt
ZW50LmFkZEV2ZW50TGlzdGVuZXIoIkRPTU5vZGVSZW1vdmVkIiwgZnVuY3Rpb24oKSB7CisgICAg
ICAgICAgZG9jdW1lbnQuZXhlY0NvbW1hbmQoJ0luc2VydFBhcmFncmFwaCcpOworICAgICAgfSwg
e29uY2U6IHRydWV9KTsKKyAgICAgIG9FbGVtZW50Lm91dGVySFRNTCA9ICIiOworICB9KQorPC9z
Y3JpcHQ+CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cgYi9Tb3VyY2UvV2Vi
Q29yZS9DaGFuZ2VMb2cKaW5kZXggMzU4Y2EyMzBmMi4uYjY1MGE1ZWFkZSAxMDA2NDQKLS0tIGEv
U291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1NvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpA
QCAtMSwzICsxLDIzIEBACisyMDIxLTA2LTE2ICBGcsOpZMOpcmljIFdhbmcgIDxmd2FuZ0BpZ2Fs
aWEuY29tPgorCisgICAgICAgIENyYXNoIGluIEluc2VydFBhcmFncmFwaFNlcGFyYXRvckNvbW1h
bmQ6OmRvQXBwbHkKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dp
P2lkPTIyNDk3NworCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAg
ICAgIEJlY2F1c2UgPGh0bWw+IGVsZW1lbnRzIGFyZSBoYW5kbGVkIHNwZWNpYWxseSBpbiBQb3Np
dGlvbjo6aXNDYW5kaWRhdGUoKSAoYSkgYW5kCisgICAgICAgIFBvc2l0aW9uSXRlcmF0b3I6Omlz
Q2FuZGlkYXRlKCkgKGIpLCB0aGUgZnVuY3Rpb24gSW5zZXJ0UGFyYWdyYXBoU2VwYXJhdG9yQ29t
bWFuZDo6ZG9BcHBseSgpCisgICAgICAgIG1heSBlbmQgdXAgaW4gYSBlZGdlIGNhc2Ugd2hlcmUg
dGhlIHN0YXJ0QmxvY2sgaXMgYSBzaWJsaW5nIG9mIHRoZSB2aXNpYmxlIHBvc2l0aW9uIHBlciAo
YSkKKyAgICAgICAgYnV0IGlzRmlyc3RJbkJsb2NrLGlzTGFzdEluQmxvY2sgaXMgdHJ1ZSxmYWxz
ZSBwZXIgKGIpLiBUaGlzIGxlYWRzIHRvIGhpdHRpbmcgdGhlIGRlYnVnCisgICAgICAgIGFzc2Vy
dGlvbiBBU1NFUlQoc3RhcnRCbG9jay0+Zmlyc3RDaGlsZCgpKSBhbmQgZGVyZWZlcmVuY2luZyBh
IG51bGxwdHIgcG9pbnRlciBpbiByZWxlYXNlLgorICAgICAgICBUaGlzIHBhdGNoIGZpeGVzIHRo
YXQgYnkgZXhpdGluZyBlYXJseSBpZiB0aGUgdmlzaWJsZSBwb3NpdGlvbiBpcyBub3QgYSBkZXNj
ZW5kYW50IG9mIHRoZQorICAgICAgICBzdGFydCBibG9jay4KKworICAgICAgICBUZXN0OiBlZGl0
aW5nL2luc2VydGluZy9pbnNlcnQtcGFyYWdyYXBoLXNlcGFyYXRvci13aXRoLWh0bWwtZWxlbWVu
dHMtY3Jhc2guaHRtbAorCisgICAgICAgICogZWRpdGluZy9JbnNlcnRQYXJhZ3JhcGhTZXBhcmF0
b3JDb21tYW5kLmNwcDoKKyAgICAgICAgKFdlYkNvcmU6Okluc2VydFBhcmFncmFwaFNlcGFyYXRv
ckNvbW1hbmQ6OmRvQXBwbHkpOgorCiAyMDIxLTA2LTEzICBDaHJpcyBEdW1leiAgPGNkdW1lekBh
cHBsZS5jb20+CiAKICAgICAgICAgUmVsYXggInBhcmVudCBtdXN0IGJlIGFuIEhUTUxFbGVtZW50
IiByZXN0cmljdGlvbiBpbiBvdXRlckhUTUwgc2V0dGVyCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2Vi
Q29yZS9lZGl0aW5nL0luc2VydFBhcmFncmFwaFNlcGFyYXRvckNvbW1hbmQuY3BwIGIvU291cmNl
L1dlYkNvcmUvZWRpdGluZy9JbnNlcnRQYXJhZ3JhcGhTZXBhcmF0b3JDb21tYW5kLmNwcAppbmRl
eCA5Nzc3ZTYyZDk3Li44NGI2ODRjYWZkIDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViQ29yZS9lZGl0
aW5nL0luc2VydFBhcmFncmFwaFNlcGFyYXRvckNvbW1hbmQuY3BwCisrKyBiL1NvdXJjZS9XZWJD
b3JlL2VkaXRpbmcvSW5zZXJ0UGFyYWdyYXBoU2VwYXJhdG9yQ29tbWFuZC5jcHAKQEAgLTE4Nyw2
ICsxODcsOSBAQCB2b2lkIEluc2VydFBhcmFncmFwaFNlcGFyYXRvckNvbW1hbmQ6OmRvQXBwbHko
KQogICAgIGlmICh2aXNpYmxlUG9zLmlzTnVsbCgpKQogICAgICAgICByZXR1cm47CiAKKyAgICBp
ZiAoIXN0YXJ0QmxvY2stPmNvbnRhaW5zKHZpc2libGVQb3MuZGVlcEVxdWl2YWxlbnQoKS5jb250
YWluZXJOb2RlKCkpKQorICAgICAgICByZXR1cm47CisKICAgICBjYWxjdWxhdGVTdHlsZUJlZm9y
ZUluc2VydGlvbihpbnNlcnRpb25Qb3NpdGlvbik7CiAKICAgICAvLy0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQotLSAK
Mi4yNS4xCgo=
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>432849</attachid>
            <date>2021-07-03 06:12:24 -0700</date>
            <delta_ts>2021-07-03 06:12:24 -0700</delta_ts>
            <desc>Patch (attempt to rebuild the dom tree and selection before crash)</desc>
            <filename>try-rebuilding-dom-and-selection.patch</filename>
            <type>text/plain</type>
            <size>3540</size>
            <attacher name="Frédéric Wang Nélar">fred.wang</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL2VkaXRpbmcvaW5zZXJ0aW5nL2luc2VydC1wYXJhZ3Jh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</data>

          </attachment>
      

    </bug>

</bugzilla>