<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>225267</bug_id>
          
          <creation_ts>2021-05-01 00:29:24 -0700</creation_ts>
          <short_desc>Crash in CompositeEditCommand::splitTreeToNode via InsertParagraphSeparatorCommand::doApply</short_desc>
          <delta_ts>2021-05-25 01:32:30 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>HTML Editing</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          <see_also>https://bugs.webkit.org/show_bug.cgi?id=221387</see_also>
    
    <see_also>https://bugs.webkit.org/show_bug.cgi?id=224977</see_also>
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Ryosuke Niwa">rniwa</reporter>
          <assigned_to name="Frédéric Wang Nélar">fred.wang</assigned_to>
          <cc>bfulgham</cc>
    
    <cc>cgarcia</cc>
    
    <cc>ews-feeder</cc>
    
    <cc>fred.wang</cc>
    
    <cc>gpoo</cc>
    
    <cc>product-security</cc>
    
    <cc>rbuis</cc>
    
    <cc>svillar</cc>
    
    <cc>webkit-bug-importer</cc>
    
    <cc>wenson_hsieh</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1755922</commentid>
    <comment_count>0</comment_count>
      <attachid>427490</attachid>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2021-05-01 00:29:24 -0700</bug_when>
    <thetext>Created attachment 427490
Test

e.g.

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebCore             	0x000000010d479fef WebCore::Node::ref() const + 0 (Node.h:780) [inlined]
1   com.apple.WebCore             	0x000000010d479fef WTF::DefaultRefDerefTraits&lt;WebCore::Node&gt;::refIfNotNull(WebCore::Node*) + 0 (RefPtr.h:36) [inlined]
2   com.apple.WebCore             	0x000000010d479fef WTF::RefPtr&lt;WebCore::Node, WTF::RawPtrTraits&lt;WebCore::Node&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::Node&gt; &gt;::RefPtr(WebCore::Node*) + 0 (RefPtr.h:63) [inlined]
3   com.apple.WebCore             	0x000000010d479fef WTF::RefPtr&lt;WebCore::Node, WTF::RawPtrTraits&lt;WebCore::Node&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::Node&gt; &gt;::RefPtr(WebCore::Node*) + 0 (RefPtr.h:63) [inlined]
4   com.apple.WebCore             	0x000000010d479fef WTF::RefPtr&lt;WebCore::Node, WTF::RawPtrTraits&lt;WebCore::Node&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::Node&gt; &gt;::operator=(WebCore::Node*) + 0 (RefPtr.h:153) [inlined]
5   com.apple.WebCore             	0x000000010d479fef WebCore::CompositeEditCommand::splitTreeToNode(WebCore::Node&amp;, WebCore::Node&amp;, bool) + 79 (CompositeEditCommand.cpp:1751)
6   com.apple.WebCore             	0x000000010d4cbafd WebCore::InsertParagraphSeparatorCommand::doApply() + 6637 (InsertParagraphSeparatorCommand.cpp:396)
7   com.apple.WebCore             	0x000000010d473ea8 WebCore::CompositeEditCommand::applyCommandToComposite(WTF::Ref&lt;WebCore::EditCommand, WTF::RawPtrTraits&lt;WebCore::EditCommand&gt; &gt;&amp;&amp;) + 40 (CompositeEditCommand.cpp:488)
8   com.apple.WebCore             	0x000000010d4743d9 WebCore::CompositeEditCommand::insertParagraphSeparator(bool, bool) + 89 (CompositeEditCommand.cpp:529)
9   com.apple.WebCore             	0x000000010d4e2c96 WebCore::ReplaceSelectionCommand::doApply() + 14134 (ReplaceSelectionCommand.cpp:1426)
10  com.apple.WebCore             	0x000000010d4631e7 WebCore::CompositeEditCommand::apply() + 167 (CompositeEditCommand.cpp:397)
11  com.apple.WebCore             	0x000000010d4972c4 WebCore::Editor::replaceSelectionWithFragment(WebCore::DocumentFragment&amp;, WebCore::Editor::SelectReplacement, WebCore::Editor::SmartReplace, WebCore::Editor::MatchStyle, WebCore::EditAction, WebCore::MailBlockquoteHandling) + 868 (Editor.cpp:694)
12  com.apple.WebCore             	0x000000010d497a86 WebCore::Editor::replaceSelectionWithText(WTF::String const&amp;, WebCore::Editor::SelectReplacement, WebCore::Editor::SmartReplace, WebCore::EditAction) + 118 (Editor.cpp:737)
13  com.apple.WebCore             	0x000000010d496ef9 WebCore::Editor::handleTextEvent(WebCore::TextEvent&amp;) + 201 (Editor.cpp:345)
14  com.apple.WebCore             	0x000000010d96633f WebCore::EventHandler::defaultTextInputEventHandler(WebCore::TextEvent&amp;) + 31 (EventHandler.cpp:4153)
15  com.apple.WebCore             	0x000000010d3cd353 WebCore::callDefaultEventHandlersInBubblingOrder(WebCore::Event&amp;, WebCore::EventPath const&amp;) + 39 (EventDispatcher.cpp:63) [inlined]
16  com.apple.WebCore             	0x000000010d3cd353 WebCore::EventDispatcher::dispatchEvent(WebCore::Node&amp;, WebCore::Event&amp;) + 1779 (EventDispatcher.cpp:204)
17  com.apple.WebCore             	0x000000010d499699 WebCore::Editor::pasteAsPlainText(WTF::String const&amp;, bool) + 217 (Editor.cpp:617)
18  com.apple.WebCore             	0x000000010d499aa9 WebCore::Editor::pasteAsPlainTextWithPasteboard(WebCore::Pasteboard&amp;) + 361 (Editor.cpp:637)
19  com.apple.WebCore             	0x000000010d4a0bcc WebCore::Editor::pasteAsPlainText(WebCore::Editor::FromMenuOrKeyBinding) + 412 (Editor.cpp:1489)
20  com.apple.WebCore             	0x000000010d4c22b3 WebCore::executePasteAndMatchStyle(WebCore::Frame&amp;, WebCore::Event*, WebCore::EditorCommandSource, WTF::String const&amp;) + 51 (EditorCommand.cpp:935)
21  com.apple.WebCore             	0x000000010d390ccc WebCore::Document::execCommand(WTF::String const&amp;, bool, WTF::String const&amp;) + 76 (Document.cpp:5870)

&lt;rdar://77377890&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1755923</commentid>
    <comment_count>1</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2021-05-01 00:30:13 -0700</bug_when>
    <thetext>Reproduced with non-ASAN release build at r276747.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1760869</commentid>
    <comment_count>2</comment_count>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-05-17 13:54:27 -0700</bug_when>
    <thetext>I can reproduce too. In debug, we hit the following assert. In release, it&apos;s a nullptr dereference on the next line. I&apos;ll investigate. 

ASSERT(splitTo);
splitTreeToNode(*splitTo, *startBlock);</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1761084</commentid>
    <comment_count>3</comment_count>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-05-18 01:41:45 -0700</bug_when>
    <thetext>This is the tree when the crashes happen. H

insertionPosition.containerNode() == TEXT
startBlock == 


#document	0x7f2e6e803040 (renderer 0x7f2e6e8012e0) 
	HTML	0x7f2e6e803ec0 (renderer 0x7f2e6e801a20) 
		HEAD	0x7f2e6e7f9770 (renderer 0x7f2e6e7f83f0) 
			#text	0x7f2e6e7f9800 &quot;onload = () =&gt; { document.execCommand(&apos;SelectAll&apos;); document.execCommand(&apos;Copy&apos;); document.execCommand(&apos;SelectAll&apos;); document.designMode = &apos;on&apos;; document.execCommand(&apos;PasteAndMatchStyle&apos;); };&quot;
		DIV	0x7f2e6e7f9e30 (renderer 0x7f2e6e7f9ab0) 
			BR	0x7f2e6e7f9ec0 (renderer 0x7f2e6e7f99d0) 
		BODY	0x7f2e6e7f8360 (renderer 0x7f2e6e801b40) 
		STYLE	0x7f2e6e7f8010 (renderer (nil)) 
			#text	0x7f2e6e7f80d0 &quot;\n  head, script {\n    display: table;\n  }\n&quot;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1761085</commentid>
    <comment_count>4</comment_count>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-05-18 01:43:25 -0700</bug_when>
    <thetext>This is the tree when the crashes happen. H

insertionPosition.containerNode() == TEXT
startBlock == HEAD

so NodeTraversal::next returns nullptr.

HEAD is actually a display: table.

#document	0x7f2e6e803040 (renderer 0x7f2e6e8012e0) 
	HTML	0x7f2e6e803ec0 (renderer 0x7f2e6e801a20) 
		HEAD	0x7f2e6e7f9770 (renderer 0x7f2e6e7f83f0) 
			  # text	0x7f2e6e7f9800 &quot;onload = () =&gt; { document.execCommand(&apos;SelectAll&apos;); document.execCommand(&apos;Copy&apos;); document.execCommand(&apos;SelectAll&apos;); document.designMode = &apos;on&apos;; document.execCommand(&apos;PasteAndMatchStyle&apos;); };&quot;
		DIV	0x7f2e6e7f9e30 (renderer 0x7f2e6e7f9ab0) 
			BR	0x7f2e6e7f9ec0 (renderer 0x7f2e6e7f99d0) 
		BODY	0x7f2e6e7f8360 (renderer 0x7f2e6e801b40) 
		STYLE	0x7f2e6e7f8010 (renderer (nil)) 
			#text	0x7f2e6e7f80d0 &quot;\n  head, script {\n    display: table;\n  }\n&quot;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1761088</commentid>
    <comment_count>5</comment_count>
      <attachid>428919</attachid>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-05-18 01:45:18 -0700</bug_when>
    <thetext>Created attachment 428919
Tentative patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1761309</commentid>
    <comment_count>6</comment_count>
      <attachid>428919</attachid>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2021-05-18 14:16:23 -0700</bug_when>
    <thetext>Comment on attachment 428919
Tentative patch

View in context: https://bugs.webkit.org/attachment.cgi?id=428919&amp;action=review

&gt; Source/WebCore/editing/InsertParagraphSeparatorCommand.cpp:169
&gt; +        || isRenderedTable(startBlock.get())

What is the rational behind this change?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1762832</commentid>
    <comment_count>7</comment_count>
      <attachid>428919</attachid>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-05-22 12:37:56 -0700</bug_when>
    <thetext>Comment on attachment 428919
Tentative patch

View in context: https://bugs.webkit.org/attachment.cgi?id=428919&amp;action=review

&gt;&gt; Source/WebCore/editing/InsertParagraphSeparatorCommand.cpp:169
&gt;&gt; +        || isRenderedTable(startBlock.get())
&gt; 
&gt; What is the rational behind this change?

To be honest it was kind of a guess, based on comment 2 and comment 4 where the startBlock has display: table. This is similar to isTableCell at the next line or other similar tweaks I did in other bugs. However, I probably need more analysis to decide what would be the &quot;right&quot; insertion. 

BTW, this patch also works for bug 224977.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1762895</commentid>
    <comment_count>8</comment_count>
      <attachid>428919</attachid>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2021-05-22 22:53:50 -0700</bug_when>
    <thetext>Comment on attachment 428919
Tentative patch

View in context: https://bugs.webkit.org/attachment.cgi?id=428919&amp;action=review

&gt;&gt;&gt; Source/WebCore/editing/InsertParagraphSeparatorCommand.cpp:169
&gt;&gt;&gt; +        || isRenderedTable(startBlock.get())
&gt;&gt; 
&gt;&gt; What is the rational behind this change?
&gt; 
&gt; To be honest it was kind of a guess, based on comment 2 and comment 4 where the startBlock has display: table. This is similar to isTableCell at the next line or other similar tweaks I did in other bugs. However, I probably need more analysis to decide what would be the &quot;right&quot; insertion. 
&gt; 
&gt; BTW, this patch also works for bug 224977.

I guess we can land this for now since it does fix the crash.
Could you post a real patch with a test &amp; change logs?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1763077</commentid>
    <comment_count>9</comment_count>
      <attachid>429517</attachid>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-05-24 02:46:44 -0700</bug_when>
    <thetext>Created attachment 429517
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1763225</commentid>
    <comment_count>10</comment_count>
      <attachid>429517</attachid>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2021-05-24 13:16:05 -0700</bug_when>
    <thetext>Comment on attachment 429517
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=429517&amp;action=review

&gt; LayoutTests/ChangeLog:8
&gt; +        Add regression test.
&gt; +
&gt; +        Reviewed by NOBODY (OOPS!).

The order of these need to be swapped.

&gt; LayoutTests/ChangeLog:12
&gt; +        * fast/editing/paste-and-match-style-with-table-2-crash.html: Added.
&gt;  2021-05-21  Diego Pino Garcia  &lt;dpino@igalia.com&gt;

Need a blank line here.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1763457</commentid>
    <comment_count>11</comment_count>
      <attachid>429636</attachid>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-05-25 00:59:48 -0700</bug_when>
    <thetext>Created attachment 429636
Patch for landing</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1763458</commentid>
    <comment_count>12</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2021-05-25 01:00:37 -0700</bug_when>
    <thetext>Invalid ChangeLog at /Volumes/Data/worker/Commit-Queue/build/Source/WebCore/ChangeLog</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1763459</commentid>
    <comment_count>13</comment_count>
      <attachid>429637</attachid>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2021-05-25 01:06:59 -0700</bug_when>
    <thetext>Created attachment 429637
Patch for landing</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1763460</commentid>
    <comment_count>14</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2021-05-25 01:32:28 -0700</bug_when>
    <thetext>Committed r278002 (238115@main): &lt;https://commits.webkit.org/238115@main&gt;

All reviewed patches have been landed. Closing bug and clearing flags on attachment 429637.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>427490</attachid>
            <date>2021-05-01 00:29:24 -0700</date>
            <delta_ts>2021-05-05 01:34:34 -0700</delta_ts>
            <desc>Test</desc>
            <filename>repro_626.html</filename>
            <type>text/plain</type>
            <size>298</size>
            <attacher name="Ryosuke Niwa">rniwa</attacher>
            
              <data encoding="base64">PHN0eWxlPgogIGhlYWQsIHNjcmlwdCwgZGl2IHsKICAgIGRpc3BsYXk6IHRhYmxlOwogIH0KPC9z
dHlsZT4KPHNjcmlwdD4KICBvbmxvYWQgPSAoKSA9PiB7CiAgICBkb2N1bWVudC5leGVjQ29tbWFu
ZCgnU2VsZWN0QWxsJyk7CiAgICBkb2N1bWVudC5leGVjQ29tbWFuZCgnQ29weScpOwogICAgZG9j
dW1lbnQuZXhlY0NvbW1hbmQoJ1NlbGVjdEFsbCcpOwogICAgZG9jdW1lbnQuZGVzaWduTW9kZSA9
ICdvbic7CiAgICBkb2N1bWVudC5leGVjQ29tbWFuZCgnUGFzdGVBbmRNYXRjaFN0eWxlJyk7CiAg
fTsKPC9zY3JpcHQ+Cg==
</data>

          </attachment>
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>428919</attachid>
            <date>2021-05-18 01:45:18 -0700</date>
            <delta_ts>2021-05-24 02:46:44 -0700</delta_ts>
            <desc>Tentative patch</desc>
            <filename>bug225267.patch</filename>
            <type>text/plain</type>
            <size>832</size>
            <attacher name="Frédéric Wang Nélar">fred.wang</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL2VkaXRpbmcvSW5zZXJ0UGFyYWdyYXBoU2VwYXJh
dG9yQ29tbWFuZC5jcHAgYi9Tb3VyY2UvV2ViQ29yZS9lZGl0aW5nL0luc2VydFBhcmFncmFwaFNl
cGFyYXRvckNvbW1hbmQuY3BwCmluZGV4IDc5Y2E2ZjFkMGUuLjk3NzdlNjJkOTcgMTAwNjQ0Ci0t
LSBhL1NvdXJjZS9XZWJDb3JlL2VkaXRpbmcvSW5zZXJ0UGFyYWdyYXBoU2VwYXJhdG9yQ29tbWFu
ZC5jcHAKKysrIGIvU291cmNlL1dlYkNvcmUvZWRpdGluZy9JbnNlcnRQYXJhZ3JhcGhTZXBhcmF0
b3JDb21tYW5kLmNwcApAQCAtMTY2LDYgKzE2Niw3IEBAIHZvaWQgSW5zZXJ0UGFyYWdyYXBoU2Vw
YXJhdG9yQ29tbWFuZDo6ZG9BcHBseSgpCiAgICAgUG9zaXRpb24gY2Fub25pY2FsUG9zID0gVmlz
aWJsZVBvc2l0aW9uKGluc2VydGlvblBvc2l0aW9uKS5kZWVwRXF1aXZhbGVudCgpOwogICAgIGlm
ICghc3RhcnRCbG9jawogICAgICAgICB8fCAhc3RhcnRCbG9jay0+bm9uU2hhZG93Qm91bmRhcnlQ
YXJlbnROb2RlKCkKKyAgICAgICAgfHwgaXNSZW5kZXJlZFRhYmxlKHN0YXJ0QmxvY2suZ2V0KCkp
CiAgICAgICAgIHx8IGlzVGFibGVDZWxsKHN0YXJ0QmxvY2suZ2V0KCkpCiAgICAgICAgIHx8IGlz
PEhUTUxGb3JtRWxlbWVudD4oKnN0YXJ0QmxvY2spCiAgICAgICAgIC8vIEZJWE1FOiBJZiB0aGUg
bm9kZSBpcyBoaWRkZW4sIHdlIGRvbid0IGhhdmUgYSBjYW5vbmljYWwgcG9zaXRpb24gc28gd2Ug
d2lsbCBkbyB0aGUgd3JvbmcgdGhpbmcgZm9yIHRhYmxlcyBhbmQgPGhyPi4gaHR0cHM6Ly9idWdz
LndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTQwMzQyCg==
</data>
<flag name="commit-queue"
          id="450000"
          type_id="3"
          status="-"
          setter="ews-feeder"
    />
          </attachment>
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>429517</attachid>
            <date>2021-05-24 02:46:44 -0700</date>
            <delta_ts>2021-05-25 00:59:48 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>0001-225267.patch</filename>
            <type>text/plain</type>
            <size>4903</size>
            <attacher name="Frédéric Wang Nélar">fred.wang</attacher>
            
              <data encoding="base64">RnJvbSA3ZDI0ZGEwYjY5YzAwNWMyYmNlNmJiMDc0ZjdlMjMzMWFlMGY5MzRmIE1vbiBTZXAgMTcg
MDA6MDA6MDAgMjAwMQpGcm9tOiA9P1VURi04P3E/RnI9QzM9QTlkPUMzPUE5cmljPTIwV2FuZz89
IDxmd2FuZ0BpZ2FsaWEuY29tPgpEYXRlOiBNb24sIDI0IE1heSAyMDIxIDExOjQ1OjI4ICswMjAw
ClN1YmplY3Q6IFtQQVRDSF0gMjI1MjY3CgotLS0KIExheW91dFRlc3RzL0NoYW5nZUxvZyAgICAg
ICAgICAgICAgICAgICAgICAgICB8IDExICsrKysrKysrKysrCiAuLi5hdGNoLXN0eWxlLXdpdGgt
dGFibGUtMi1jcmFzaC1leHBlY3RlZC50eHQgfCAgNCArKysrCiAuLi50ZS1hbmQtbWF0Y2gtc3R5
bGUtd2l0aC10YWJsZS0yLWNyYXNoLmh0bWwgfCAxNyArKysrKysrKysrKysrKysrKwogU291cmNl
L1dlYkNvcmUvQ2hhbmdlTG9nICAgICAgICAgICAgICAgICAgICAgIHwgMTkgKysrKysrKysrKysr
KysrKysrKwogU291cmNlL1dlYkNvcmUvZWRpdGluZy9tYXJrdXAuY3BwICAgICAgICAgICAgIHwg
IDIgKy0KIDUgZmlsZXMgY2hhbmdlZCwgNTIgaW5zZXJ0aW9ucygrKSwgMSBkZWxldGlvbigtKQog
Y3JlYXRlIG1vZGUgMTAwNjQ0IExheW91dFRlc3RzL2Zhc3QvZWRpdGluZy9wYXN0ZS1hbmQtbWF0
Y2gtc3R5bGUtd2l0aC10YWJsZS0yLWNyYXNoLWV4cGVjdGVkLnR4dAogY3JlYXRlIG1vZGUgMTAw
NjQ0IExheW91dFRlc3RzL2Zhc3QvZWRpdGluZy9wYXN0ZS1hbmQtbWF0Y2gtc3R5bGUtd2l0aC10
YWJsZS0yLWNyYXNoLmh0bWwKCmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cgYi9M
YXlvdXRUZXN0cy9DaGFuZ2VMb2cKaW5kZXggZDIwZmQ0MWM2Ni4uYjQ3ZTYzM2IxZSAxMDA2NDQK
LS0tIGEvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCisrKyBiL0xheW91dFRlc3RzL0NoYW5nZUxvZwpA
QCAtMSwzICsxLDE0IEBACisyMDIxLTA1LTI0ICBGcmVkZXJpYyBXYW5nICA8ZndhbmdAaWdhbGlh
LmNvbT4KKworICAgICAgICBDcmFzaCBpbiBDb21wb3NpdGVFZGl0Q29tbWFuZDo6c3BsaXRUcmVl
VG9Ob2RlIHZpYSBJbnNlcnRQYXJhZ3JhcGhTZXBhcmF0b3JDb21tYW5kOjpkb0FwcGx5CisgICAg
ICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0yMjUyNjcKKworICAg
ICAgICBBZGQgcmVncmVzc2lvbiB0ZXN0LgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAo
T09QUyEpLgorCisgICAgICAgICogZmFzdC9lZGl0aW5nL3Bhc3RlLWFuZC1tYXRjaC1zdHlsZS13
aXRoLXRhYmxlLTItY3Jhc2gtZXhwZWN0ZWQudHh0OiBBZGRlZC4KKyAgICAgICAgKiBmYXN0L2Vk
aXRpbmcvcGFzdGUtYW5kLW1hdGNoLXN0eWxlLXdpdGgtdGFibGUtMi1jcmFzaC5odG1sOiBBZGRl
ZC4KIDIwMjEtMDUtMjEgIERpZWdvIFBpbm8gR2FyY2lhICA8ZHBpbm9AaWdhbGlhLmNvbT4KIAog
ICAgICAgICBTZXQgQ2FudmFzSW1hZ2VTbW9vdGhpbmcuaW1hZ2VTbW9vdGhpbmdRdWFsaXR5IHZh
bHVlIHRvICdsb3cnIGFzIGRlZmF1bHQKZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL2Zhc3QvZWRp
dGluZy9wYXN0ZS1hbmQtbWF0Y2gtc3R5bGUtd2l0aC10YWJsZS0yLWNyYXNoLWV4cGVjdGVkLnR4
dCBiL0xheW91dFRlc3RzL2Zhc3QvZWRpdGluZy9wYXN0ZS1hbmQtbWF0Y2gtc3R5bGUtd2l0aC10
YWJsZS0yLWNyYXNoLWV4cGVjdGVkLnR4dApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAw
MDAwMDAwLi42MmYzZjhhM2NiCi0tLSAvZGV2L251bGwKKysrIGIvTGF5b3V0VGVzdHMvZmFzdC9l
ZGl0aW5nL3Bhc3RlLWFuZC1tYXRjaC1zdHlsZS13aXRoLXRhYmxlLTItY3Jhc2gtZXhwZWN0ZWQu
dHh0CkBAIC0wLDAgKzEsNCBAQAorQ09OU09MRSBNRVNTQUdFOiBUaGlzIHRlc3QgcGFzc2VzIGlm
IGl0IGRvZXMgbm90IGNyYXNoLgoraWYgKHdpbmRvdy50ZXN0UnVubmVyKSB0ZXN0UnVubmVyLmR1
bXBBc1RleHQoKTsgb25sb2FkID0gKCkgPT4geyBjb25zb2xlLmxvZygiVGhpcyB0ZXN0IHBhc3Nl
cyBpZiBpdCBkb2VzIG5vdCBjcmFzaC4iKTsgZG9jdW1lbnQuZXhlY0NvbW1hbmQoJ1NlbGVjdEFs
bCcpOyBkb2N1bWVudC5leGVjQ29tbWFuZCgnQ29weScpOyBkb2N1bWVudC5leGVjQ29tbWFuZCgn
U2VsZWN0QWxsJyk7IGRvY3VtZW50LmRlc2lnbk1vZGUgPSAnb24nOyBkb2N1bWVudC5leGVjQ29t
bWFuZCgnUGFzdGVBbmRNYXRjaFN0eWxlJyk7IH07CisKKwpkaWZmIC0tZ2l0IGEvTGF5b3V0VGVz
dHMvZmFzdC9lZGl0aW5nL3Bhc3RlLWFuZC1tYXRjaC1zdHlsZS13aXRoLXRhYmxlLTItY3Jhc2gu
aHRtbCBiL0xheW91dFRlc3RzL2Zhc3QvZWRpdGluZy9wYXN0ZS1hbmQtbWF0Y2gtc3R5bGUtd2l0
aC10YWJsZS0yLWNyYXNoLmh0bWwKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMDAw
MC4uNmRhZTExMmMxMwotLS0gL2Rldi9udWxsCisrKyBiL0xheW91dFRlc3RzL2Zhc3QvZWRpdGlu
Zy9wYXN0ZS1hbmQtbWF0Y2gtc3R5bGUtd2l0aC10YWJsZS0yLWNyYXNoLmh0bWwKQEAgLTAsMCAr
MSwxNyBAQAorPHN0eWxlPgorICBoZWFkLCBzY3JpcHQgeworICAgIGRpc3BsYXk6IHRhYmxlOwor
ICB9Cis8L3N0eWxlPgorPHNjcmlwdD4KKyAgaWYgKHdpbmRvdy50ZXN0UnVubmVyKQorICAgICAg
dGVzdFJ1bm5lci5kdW1wQXNUZXh0KCk7CisgIG9ubG9hZCA9ICgpID0+IHsKKyAgICBjb25zb2xl
LmxvZygiVGhpcyB0ZXN0IHBhc3NlcyBpZiBpdCBkb2VzIG5vdCBjcmFzaC4iKTsKKyAgICBkb2N1
bWVudC5leGVjQ29tbWFuZCgnU2VsZWN0QWxsJyk7CisgICAgZG9jdW1lbnQuZXhlY0NvbW1hbmQo
J0NvcHknKTsKKyAgICBkb2N1bWVudC5leGVjQ29tbWFuZCgnU2VsZWN0QWxsJyk7CisgICAgZG9j
dW1lbnQuZGVzaWduTW9kZSA9ICdvbic7CisgICAgZG9jdW1lbnQuZXhlY0NvbW1hbmQoJ1Bhc3Rl
QW5kTWF0Y2hTdHlsZScpOworICB9OworPC9zY3JpcHQ+CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2Vi
Q29yZS9DaGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggMGY2MGI3N2U5
My4uY2MzMjA2NWM2YiAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBi
L1NvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDIyIEBACiswMjEtMDUtMjQgIEZy
ZWRlcmljIFdhbmcgIDxmd2FuZ0BpZ2FsaWEuY29tPgorCisgICAgICAgIENyYXNoIGluIENvbXBv
c2l0ZUVkaXRDb21tYW5kOjpzcGxpdFRyZWVUb05vZGUgdmlhIEluc2VydFBhcmFncmFwaFNlcGFy
YXRvckNvbW1hbmQ6OmRvQXBwbHkKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hv
d19idWcuY2dpP2lkPTIyNTI2NworCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEp
LgorCisgICAgICAgIFdlYkNvcmU6OlBvc2l0aW9uOjp1cHN0cmVhbSBiZWhhdmVzIHNwZWNpYWxs
eSBmb3IgdGFibGUgcmVuZGVyZXIsIHdoaWNoIG1heSBjb25mdXNlIHRoZQorICAgICAgICBleGVj
dXRpb24gb2YgV2ViQ29yZTo6SW5zZXJ0UGFyYWdyYXBoU2VwYXJhdG9yQ29tbWFuZDo6ZG9BcHBs
eSgpIHdoZW4gdGhlIHZpc2libGUgcG9zaXRpb24KKyAgICAgICAgaXMgd2l0aGluIGEgdGFibGUs
IGxlYWRpbmcgdG8gYSBkZWJ1ZyBhc3NlcnRpb24gZmFpbHVyZSBhbmQgYSBudWxscHRyIGRlcmVm
ZXJlbmNlIGluIHJlbGVhc2UKKyAgICAgICAgYnVpbGQuIEluIHIyNzMzNzUsIHRoaXMgd2FzIGZp
eGVkIGZvciBET00gZWxlbWVudHMgd2l0aCB0aGUgdGFibGUgdGFnLCBidXQgdGhpcyBkb2VzIG5v
dCB3b3JrCisgICAgICAgIGZvciBkaXNwbGF5OiB0YWJsZS4gVGhpcyBwYXRjaCBpbnN0ZWFkIGRp
cmVjdGx5IGNhbGxzIGlzUmVuZGVyZWRUYWJsZSwgZm9yIGNvbnNpc3RlbmN5IHdpdGgKKyAgICAg
ICAgV2ViQ29yZTo6UG9zaXRpb246OnVwc3RyZWFtLgorCisgICAgICAgIFRlc3Q6IGZhc3QvZWRp
dGluZy9wYXN0ZS1hbmQtbWF0Y2gtc3R5bGUtd2l0aC10YWJsZS0yLWNyYXNoLmh0bWwKKworICAg
ICAgICAqIGVkaXRpbmcvbWFya3VwLmNwcDoKKyAgICAgICAgKFdlYkNvcmU6OmNyZWF0ZUZyYWdt
ZW50RnJvbVRleHQpOiBVc2UgaXNSZW5kZXJlZFRhYmxlIGluc3RlYWQgb2YgY2hlY2tpbmcgdGhl
IHRhZyBuYW1lLgorCiAyMDIxLTA1LTIyICBDb21taXQgUXVldWUgIDxjb21taXQtcXVldWVAd2Vi
a2l0Lm9yZz4KIAogICAgICAgICBVbnJldmlld2VkLCByZXZlcnRpbmcgcjI3NzkxMy4KZGlmZiAt
LWdpdCBhL1NvdXJjZS9XZWJDb3JlL2VkaXRpbmcvbWFya3VwLmNwcCBiL1NvdXJjZS9XZWJDb3Jl
L2VkaXRpbmcvbWFya3VwLmNwcAppbmRleCAxOWNiMGQ5YThlLi4xZjU2YTZmOWQ5IDEwMDY0NAot
LS0gYS9Tb3VyY2UvV2ViQ29yZS9lZGl0aW5nL21hcmt1cC5jcHAKKysrIGIvU291cmNlL1dlYkNv
cmUvZWRpdGluZy9tYXJrdXAuY3BwCkBAIC0xMjAzLDcgKzEyMDMsNyBAQCBSZWY8RG9jdW1lbnRG
cmFnbWVudD4gY3JlYXRlRnJhZ21lbnRGcm9tVGV4dChjb25zdCBTaW1wbGVSYW5nZSYgY29udGV4
dCwgY29uc3QgUwogICAgICAgICAmJiAhYmxvY2stPmhhc1RhZ05hbWUoYm9keVRhZykKICAgICAg
ICAgJiYgIWJsb2NrLT5oYXNUYWdOYW1lKGh0bWxUYWcpCiAgICAgICAgIC8vIEF2b2lkIHVzaW5n
IHRhYmxlIGFzIHBhcmFncmFwaHMgZHVlIHRvIGl0cyBzcGVjaWFsIHRyZWF0bWVudCBpbiBQb3Np
dGlvbjo6dXBzdHJlYW0vZG93bnN0cmVhbS4KLSAgICAgICAgJiYgIWJsb2NrLT5oYXNUYWdOYW1l
KHRhYmxlVGFnKQorICAgICAgICAmJiAhaXNSZW5kZXJlZFRhYmxlKGJsb2NrKQogICAgICAgICAm
JiBibG9jayAhPSBlZGl0YWJsZVJvb3RGb3JQb3NpdGlvbihzdGFydCk7CiAgICAgYm9vbCB1c2VM
aW5lQnJlYWsgPSBlbmNsb3NpbmdUZXh0Rm9ybUNvbnRyb2woc3RhcnQpOwogCi0tIAoyLjI1LjEK
Cg==
</data>
<flag name="review"
          id="450718"
          type_id="1"
          status="+"
          setter="rniwa"
    />
          </attachment>
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>429636</attachid>
            <date>2021-05-25 00:59:48 -0700</date>
            <delta_ts>2021-05-25 01:06:59 -0700</delta_ts>
            <desc>Patch for landing</desc>
            <filename>0001-Bug-225267-Crash-in-CompositeEditCommand-splitTreeTo.patch</filename>
            <type>text/plain</type>
            <size>4975</size>
            <attacher name="Frédéric Wang Nélar">fred.wang</attacher>
            
              <data encoding="base64">RnJvbSAxODA4MThkYzU1M2ZiODJhNDA0MGI0MGM5NTk0YTUyMTJmZDJiYjYxIE1vbiBTZXAgMTcg
MDA6MDA6MDAgMjAwMQpGcm9tOiA9P1VURi04P3E/RnI9QzM9QTlkPUMzPUE5cmljPTIwV2FuZz89
IDxmd2FuZ0BpZ2FsaWEuY29tPgpEYXRlOiBUdWUsIDI1IE1heSAyMDIxIDA5OjU3OjM4ICswMjAw
ClN1YmplY3Q6IFtQQVRDSF0gQnVnIDIyNTI2NyAtIENyYXNoIGluIENvbXBvc2l0ZUVkaXRDb21t
YW5kOjpzcGxpdFRyZWVUb05vZGUKIHZpYSBJbnNlcnRQYXJhZ3JhcGhTZXBhcmF0b3JDb21tYW5k
Ojpkb0FwcGx5CgotLS0KIExheW91dFRlc3RzL0NoYW5nZUxvZyAgICAgICAgICAgICAgICAgICAg
ICAgICB8IDEyICsrKysrKysrKysrKwogLi4uYXRjaC1zdHlsZS13aXRoLXRhYmxlLTItY3Jhc2gt
ZXhwZWN0ZWQudHh0IHwgIDQgKysrKwogLi4udGUtYW5kLW1hdGNoLXN0eWxlLXdpdGgtdGFibGUt
Mi1jcmFzaC5odG1sIHwgMTcgKysrKysrKysrKysrKysrKysKIFNvdXJjZS9XZWJDb3JlL0NoYW5n
ZUxvZyAgICAgICAgICAgICAgICAgICAgICB8IDE5ICsrKysrKysrKysrKysrKysrKysKIFNvdXJj
ZS9XZWJDb3JlL2VkaXRpbmcvbWFya3VwLmNwcCAgICAgICAgICAgICB8ICAyICstCiA1IGZpbGVz
IGNoYW5nZWQsIDUzIGluc2VydGlvbnMoKyksIDEgZGVsZXRpb24oLSkKIGNyZWF0ZSBtb2RlIDEw
MDY0NCBMYXlvdXRUZXN0cy9mYXN0L2VkaXRpbmcvcGFzdGUtYW5kLW1hdGNoLXN0eWxlLXdpdGgt
dGFibGUtMi1jcmFzaC1leHBlY3RlZC50eHQKIGNyZWF0ZSBtb2RlIDEwMDY0NCBMYXlvdXRUZXN0
cy9mYXN0L2VkaXRpbmcvcGFzdGUtYW5kLW1hdGNoLXN0eWxlLXdpdGgtdGFibGUtMi1jcmFzaC5o
dG1sCgpkaWZmIC0tZ2l0IGEvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nIGIvTGF5b3V0VGVzdHMvQ2hh
bmdlTG9nCmluZGV4IGM2N2E1MmY3ZTQuLmJhMDdjMTM2M2MgMTAwNjQ0Ci0tLSBhL0xheW91dFRl
c3RzL0NoYW5nZUxvZworKysgYi9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cKQEAgLTEsMyArMSwxNSBA
QAorMjAyMS0wNS0yNCAgRnJlZGVyaWMgV2FuZyAgPGZ3YW5nQGlnYWxpYS5jb20+CisKKyAgICAg
ICAgQ3Jhc2ggaW4gQ29tcG9zaXRlRWRpdENvbW1hbmQ6OnNwbGl0VHJlZVRvTm9kZSB2aWEgSW5z
ZXJ0UGFyYWdyYXBoU2VwYXJhdG9yQ29tbWFuZDo6ZG9BcHBseQorICAgICAgICBodHRwczovL2J1
Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MjI1MjY3CisKKyAgICAgICAgUmV2aWV3ZWQg
YnkgUnlvc3VrZSBOaXdhLgorCisgICAgICAgIEFkZCByZWdyZXNzaW9uIHRlc3QuCisKKyAgICAg
ICAgKiBmYXN0L2VkaXRpbmcvcGFzdGUtYW5kLW1hdGNoLXN0eWxlLXdpdGgtdGFibGUtMi1jcmFz
aC1leHBlY3RlZC50eHQ6IEFkZGVkLgorICAgICAgICAqIGZhc3QvZWRpdGluZy9wYXN0ZS1hbmQt
bWF0Y2gtc3R5bGUtd2l0aC10YWJsZS0yLWNyYXNoLmh0bWw6IEFkZGVkLgorCiAyMDIxLTA1LTI1
ICBGdWppaSBIaXJvbm9yaSAgPEhpcm9ub3JpLkZ1amlpQHNvbnkuY29tPgogCiAgICAgICAgIFtX
aW5DYWlyb10gVW5yZXZpZXdlZCB0ZXN0IGdhcmRlbmluZwpkaWZmIC0tZ2l0IGEvTGF5b3V0VGVz
dHMvZmFzdC9lZGl0aW5nL3Bhc3RlLWFuZC1tYXRjaC1zdHlsZS13aXRoLXRhYmxlLTItY3Jhc2gt
ZXhwZWN0ZWQudHh0IGIvTGF5b3V0VGVzdHMvZmFzdC9lZGl0aW5nL3Bhc3RlLWFuZC1tYXRjaC1z
dHlsZS13aXRoLXRhYmxlLTItY3Jhc2gtZXhwZWN0ZWQudHh0Cm5ldyBmaWxlIG1vZGUgMTAwNjQ0
CmluZGV4IDAwMDAwMDAwMDAuLjYyZjNmOGEzY2IKLS0tIC9kZXYvbnVsbAorKysgYi9MYXlvdXRU
ZXN0cy9mYXN0L2VkaXRpbmcvcGFzdGUtYW5kLW1hdGNoLXN0eWxlLXdpdGgtdGFibGUtMi1jcmFz
aC1leHBlY3RlZC50eHQKQEAgLTAsMCArMSw0IEBACitDT05TT0xFIE1FU1NBR0U6IFRoaXMgdGVz
dCBwYXNzZXMgaWYgaXQgZG9lcyBub3QgY3Jhc2guCitpZiAod2luZG93LnRlc3RSdW5uZXIpIHRl
c3RSdW5uZXIuZHVtcEFzVGV4dCgpOyBvbmxvYWQgPSAoKSA9PiB7IGNvbnNvbGUubG9nKCJUaGlz
IHRlc3QgcGFzc2VzIGlmIGl0IGRvZXMgbm90IGNyYXNoLiIpOyBkb2N1bWVudC5leGVjQ29tbWFu
ZCgnU2VsZWN0QWxsJyk7IGRvY3VtZW50LmV4ZWNDb21tYW5kKCdDb3B5Jyk7IGRvY3VtZW50LmV4
ZWNDb21tYW5kKCdTZWxlY3RBbGwnKTsgZG9jdW1lbnQuZGVzaWduTW9kZSA9ICdvbic7IGRvY3Vt
ZW50LmV4ZWNDb21tYW5kKCdQYXN0ZUFuZE1hdGNoU3R5bGUnKTsgfTsKKworCmRpZmYgLS1naXQg
YS9MYXlvdXRUZXN0cy9mYXN0L2VkaXRpbmcvcGFzdGUtYW5kLW1hdGNoLXN0eWxlLXdpdGgtdGFi
bGUtMi1jcmFzaC5odG1sIGIvTGF5b3V0VGVzdHMvZmFzdC9lZGl0aW5nL3Bhc3RlLWFuZC1tYXRj
aC1zdHlsZS13aXRoLXRhYmxlLTItY3Jhc2guaHRtbApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRl
eCAwMDAwMDAwMDAwLi42ZGFlMTEyYzEzCi0tLSAvZGV2L251bGwKKysrIGIvTGF5b3V0VGVzdHMv
ZmFzdC9lZGl0aW5nL3Bhc3RlLWFuZC1tYXRjaC1zdHlsZS13aXRoLXRhYmxlLTItY3Jhc2guaHRt
bApAQCAtMCwwICsxLDE3IEBACis8c3R5bGU+CisgIGhlYWQsIHNjcmlwdCB7CisgICAgZGlzcGxh
eTogdGFibGU7CisgIH0KKzwvc3R5bGU+Cis8c2NyaXB0PgorICBpZiAod2luZG93LnRlc3RSdW5u
ZXIpCisgICAgICB0ZXN0UnVubmVyLmR1bXBBc1RleHQoKTsKKyAgb25sb2FkID0gKCkgPT4gewor
ICAgIGNvbnNvbGUubG9nKCJUaGlzIHRlc3QgcGFzc2VzIGlmIGl0IGRvZXMgbm90IGNyYXNoLiIp
OworICAgIGRvY3VtZW50LmV4ZWNDb21tYW5kKCdTZWxlY3RBbGwnKTsKKyAgICBkb2N1bWVudC5l
eGVjQ29tbWFuZCgnQ29weScpOworICAgIGRvY3VtZW50LmV4ZWNDb21tYW5kKCdTZWxlY3RBbGwn
KTsKKyAgICBkb2N1bWVudC5kZXNpZ25Nb2RlID0gJ29uJzsKKyAgICBkb2N1bWVudC5leGVjQ29t
bWFuZCgnUGFzdGVBbmRNYXRjaFN0eWxlJyk7CisgIH07Cis8L3NjcmlwdD4KZGlmZiAtLWdpdCBh
L1NvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZyBiL1NvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwppbmRl
eCA3NTg0MTY0ZTI4Li40MjMxMTJmODNlIDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViQ29yZS9DaGFu
Z2VMb2cKKysrIGIvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMjIgQEAKKzAy
MS0wNS0yNCAgRnJlZGVyaWMgV2FuZyAgPGZ3YW5nQGlnYWxpYS5jb20+CisKKyAgICAgICAgQ3Jh
c2ggaW4gQ29tcG9zaXRlRWRpdENvbW1hbmQ6OnNwbGl0VHJlZVRvTm9kZSB2aWEgSW5zZXJ0UGFy
YWdyYXBoU2VwYXJhdG9yQ29tbWFuZDo6ZG9BcHBseQorICAgICAgICBodHRwczovL2J1Z3Mud2Vi
a2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MjI1MjY3CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgUnlv
c3VrZSBOaXdhLgorCisgICAgICAgIFdlYkNvcmU6OlBvc2l0aW9uOjp1cHN0cmVhbSBiZWhhdmVz
IHNwZWNpYWxseSBmb3IgdGFibGUgcmVuZGVyZXIsIHdoaWNoIG1heSBjb25mdXNlIHRoZQorICAg
ICAgICBleGVjdXRpb24gb2YgV2ViQ29yZTo6SW5zZXJ0UGFyYWdyYXBoU2VwYXJhdG9yQ29tbWFu
ZDo6ZG9BcHBseSgpIHdoZW4gdGhlIHZpc2libGUgcG9zaXRpb24KKyAgICAgICAgaXMgd2l0aGlu
IGEgdGFibGUsIGxlYWRpbmcgdG8gYSBkZWJ1ZyBhc3NlcnRpb24gZmFpbHVyZSBhbmQgYSBudWxs
cHRyIGRlcmVmZXJlbmNlIGluIHJlbGVhc2UKKyAgICAgICAgYnVpbGQuIEluIHIyNzMzNzUsIHRo
aXMgd2FzIGZpeGVkIGZvciBET00gZWxlbWVudHMgd2l0aCB0aGUgdGFibGUgdGFnLCBidXQgdGhp
cyBkb2VzIG5vdCB3b3JrCisgICAgICAgIGZvciBkaXNwbGF5OiB0YWJsZS4gVGhpcyBwYXRjaCBp
bnN0ZWFkIGRpcmVjdGx5IGNhbGxzIGlzUmVuZGVyZWRUYWJsZSwgZm9yIGNvbnNpc3RlbmN5IHdp
dGgKKyAgICAgICAgV2ViQ29yZTo6UG9zaXRpb246OnVwc3RyZWFtLgorCisgICAgICAgIFRlc3Q6
IGZhc3QvZWRpdGluZy9wYXN0ZS1hbmQtbWF0Y2gtc3R5bGUtd2l0aC10YWJsZS0yLWNyYXNoLmh0
bWwKKworICAgICAgICAqIGVkaXRpbmcvbWFya3VwLmNwcDoKKyAgICAgICAgKFdlYkNvcmU6OmNy
ZWF0ZUZyYWdtZW50RnJvbVRleHQpOiBVc2UgaXNSZW5kZXJlZFRhYmxlIGluc3RlYWQgb2YgY2hl
Y2tpbmcgdGhlIHRhZyBuYW1lLgorCiAyMDIxLTA1LTI1ICBJYW4gR2lsYmVydCAgPGlhbmdAYXBw
bGUuY29tPgogCiAgICAgICAgIE9ubHkgY3JlYXRlIE1lZGlhRWxlbWVudFNlc3Npb24gd2hlbiBu
ZWNlc3NhcnkKZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL2VkaXRpbmcvbWFya3VwLmNwcCBi
L1NvdXJjZS9XZWJDb3JlL2VkaXRpbmcvbWFya3VwLmNwcAppbmRleCBmYjVlMjYxMzc1Li5kNjU3
ZDM1N2UxIDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViQ29yZS9lZGl0aW5nL21hcmt1cC5jcHAKKysr
IGIvU291cmNlL1dlYkNvcmUvZWRpdGluZy9tYXJrdXAuY3BwCkBAIC0xMjAzLDcgKzEyMDMsNyBA
QCBSZWY8RG9jdW1lbnRGcmFnbWVudD4gY3JlYXRlRnJhZ21lbnRGcm9tVGV4dChjb25zdCBTaW1w
bGVSYW5nZSYgY29udGV4dCwgY29uc3QgUwogICAgICAgICAmJiAhYmxvY2stPmhhc1RhZ05hbWUo
Ym9keVRhZykKICAgICAgICAgJiYgIWJsb2NrLT5oYXNUYWdOYW1lKGh0bWxUYWcpCiAgICAgICAg
IC8vIEF2b2lkIHVzaW5nIHRhYmxlIGFzIHBhcmFncmFwaHMgZHVlIHRvIGl0cyBzcGVjaWFsIHRy
ZWF0bWVudCBpbiBQb3NpdGlvbjo6dXBzdHJlYW0vZG93bnN0cmVhbS4KLSAgICAgICAgJiYgIWJs
b2NrLT5oYXNUYWdOYW1lKHRhYmxlVGFnKQorICAgICAgICAmJiAhaXNSZW5kZXJlZFRhYmxlKGJs
b2NrKQogICAgICAgICAmJiBibG9jayAhPSBlZGl0YWJsZVJvb3RGb3JQb3NpdGlvbihzdGFydCk7
CiAgICAgYm9vbCB1c2VMaW5lQnJlYWsgPSBlbmNsb3NpbmdUZXh0Rm9ybUNvbnRyb2woc3RhcnQp
OwogCi0tIAoyLjI1LjEKCg==
</data>
<flag name="commit-queue"
          id="450872"
          type_id="3"
          status="-"
          setter="ews-feeder"
    />
          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>429637</attachid>
            <date>2021-05-25 01:06:59 -0700</date>
            <delta_ts>2021-05-25 01:32:29 -0700</delta_ts>
            <desc>Patch for landing</desc>
            <filename>0001-Bug-225267-Crash-in-CompositeEditCommand-splitTreeTo.patch</filename>
            <type>text/plain</type>
            <size>4976</size>
            <attacher name="Frédéric Wang Nélar">fred.wang</attacher>
            
              <data encoding="base64">RnJvbSA1Njc5NGQyYTA3MzQ3NTY1OGU2MTI0ZDNiMzM4ZWM2NmVhYTg3MGE4IE1vbiBTZXAgMTcg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</data>

          </attachment>
      

    </bug>

</bugzilla>