225326 2021-05-03 13:12:30 -0700 Crash in WebCore::nextBoundary() 2021-05-03 18:12:26 -0700 1 1 1 Unclassified WebKit HTML Editing WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED https://bugs.webkit.org/show_bug.cgi?id=225325 InRadar P2 Normal --- 1 julian_a_gonzalez webkit-unassigned ews-watchlist mifenton rniwa wenson_hsieh oldest_to_newest 1756289 0 julian_a_gonzalez 2021-05-03 13:12:30 -0700 e.g. 0 WebCore::Node::ref() const + 0 1 WTF::Ref<WebCore::Node, WTF::RawPtrTraits<WebCore::Node> >::Ref(WebCore::Node&) + 0 2 WTF::Ref<WebCore::Node, WTF::RawPtrTraits<WebCore::Node> >::Ref(WebCore::Node&) + 0 3 WebCore::TextIterator::range() const + 65 4 WebCore::CharacterIterator::range() const + 22 5 WebCore::nextBoundary(WebCore::VisiblePosition const&, unsigned int (*)(WTF::StringView, unsigned int, WebCore::BoundarySearchContextAvailability, bool&)) + 835 6 WebCore::endOfWord(WebCore::VisiblePosition const&, WebCore::EWordSide) + 449 7 WebCore::AlternativeTextController::respondToChangedSelection(WebCore::VisibleSelection const&) + 467 8 WebCore::Editor::editorUIUpdateTimerFired() + 547 9 WebCore::Editor::updateEditorUINowIfScheduled() + 49 10 WebCore::Editor::appliedEditing(WebCore::CompositeEditCommand&) + 1052 11 WebCore::TypingCommand::typingAddedToOpenCommand(WebCore::TypingCommand::ETypingCommand) + 120 <rdar://problem/76761928> 1756349 1 427609 julian_a_gonzalez 2021-05-03 16:00:42 -0700 Created attachment 427609 Patch 1756400 2 ews-feeder 2021-05-03 18:12:24 -0700 Committed r276940 (237273@main): <https://commits.webkit.org/237273@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 427609. 427609 2021-05-03 16:00:42 -0700 2021-05-03 18:12:25 -0700 Patch bug-225326-20210503160041.patch text/plain 1638 julian_a_gonzalez U3VidmVyc2lvbiBSZXZpc2lvbjogMjc2ODAyCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggN2ZjMWNmYjA2NGQ5OWY0 ZDVhZjVlOWJiOGRiZDZiODQ3NjVjNzFlYS4uNmFiOGEwNzk2MDA3MWM3YWQ5NDI3MjMyNDdkY2Fi NjJlZTA5ZTg1MCAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDE3IEBACisyMDIxLTA1LTAzICBKdWxp YW4gR29uemFsZXogIDxqdWxpYW5fYV9nb256YWxlekBhcHBsZS5jb20+CisKKyAgICAgICAgQ3Jh c2ggaW4gV2ViQ29yZTo6bmV4dEJvdW5kYXJ5KCkKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtp dC5vcmcvc2hvd19idWcuY2dpP2lkPTIyNTMyNgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9E WSAoT09QUyEpLgorCisgICAgICAgIG5leHRCb3VuZGFyeSgpIGNyZWF0ZXMgYSBDaGFyYWN0ZXJJ dGVyYXRvciBhbmQgY2FsbHMgcmFuZ2UoKSBvbiBpdAorICAgICAgICB3aXRob3V0IGZpcnN0IGNo ZWNraW5nIGlmIGF0RW5kKCkgaGFzIGJlZW4gcmVhY2hlZCwgd2hpY2ggY2FuIGxlYWQKKyAgICAg ICAgdG8gYSBudWxsIHBvaW50ZXIgZGVyZWZlcmVuY2UuCisKKyAgICAgICAgKiBlZGl0aW5nL1Zp c2libGVVbml0cy5jcHA6CisgICAgICAgIChXZWJDb3JlOjpuZXh0Qm91bmRhcnkpOgorCiAyMDIx LTA0LTI5ICBEZXZpbiBSb3Vzc28gIDxkcm91c3NvQGFwcGxlLmNvbT4KIAogICAgICAgICBVbnJl dmlld2VkLCBmaXggY3Jhc2hsb29wIGFmdGVyIHIyNzY3NDQKZGlmZiAtLWdpdCBhL1NvdXJjZS9X ZWJDb3JlL2VkaXRpbmcvVmlzaWJsZVVuaXRzLmNwcCBiL1NvdXJjZS9XZWJDb3JlL2VkaXRpbmcv VmlzaWJsZVVuaXRzLmNwcAppbmRleCBkMWRhOWEzODA3ZGUwYmJjNzIxY2YyZjU4YzAxZjVlYWJj MWEzOTBhLi40MWFjNGM0ZTRiM2Y5ODVjMjk1YjNlODY2NDM1ZTE0ZGNiY2Y2ZTYwIDEwMDY0NAot LS0gYS9Tb3VyY2UvV2ViQ29yZS9lZGl0aW5nL1Zpc2libGVVbml0cy5jcHAKKysrIGIvU291cmNl L1dlYkNvcmUvZWRpdGluZy9WaXNpYmxlVW5pdHMuY3BwCkBAIC02MTAsNiArNjEwLDkgQEAgc3Rh dGljIFZpc2libGVQb3NpdGlvbiBuZXh0Qm91bmRhcnkoY29uc3QgVmlzaWJsZVBvc2l0aW9uJiBj LCBCb3VuZGFyeVNlYXJjaEZ1bmMKICAgICAgICAgLy8gVXNlIHRoZSBjaGFyYWN0ZXIgaXRlcmF0 b3IgdG8gdHJhbnNsYXRlIHRoZSBuZXh0IHZhbHVlIGludG8gYSBET00gcG9zaXRpb24uCiAgICAg ICAgIENoYXJhY3Rlckl0ZXJhdG9yIGNoYXJJdCgqc2VhcmNoUmFuZ2UsIFRleHRJdGVyYXRvckVt aXRzQ2hhcmFjdGVyc0JldHdlZW5BbGxWaXNpYmxlUG9zaXRpb25zKTsKICAgICAgICAgY2hhckl0 LmFkdmFuY2UobmV4dCAtIHByZWZpeExlbmd0aCAtIDEpOworICAgICAgICBpZiAoY2hhckl0LmF0 RW5kKCkpCisgICAgICAgICAgICByZXR1cm4geyB9OworCiAgICAgICAgIGF1dG8gY2hhcmFjdGVy UmFuZ2UgPSBjaGFySXQucmFuZ2UoKTsKICAgICAgICAgcG9zID0gbWFrZURlcHJlY2F0ZWRMZWdh Y3lQb3NpdGlvbihjaGFyYWN0ZXJSYW5nZS5lbmQpOwogICAgICAgICAK