<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>37950</bug_id>
          
          <creation_ts>2010-04-21 14:08:29 -0700</creation_ts>
          <short_desc>Crash in WebCore::TextIterator::handleTextNode() encountered in Google rich-text products</short_desc>
          <delta_ts>2010-04-23 00:04:47 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>HTML Editing</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>PC</rep_platform>
          <op_sys>OS X 10.5</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P1</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Ojan Vafai">ojan</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>adele</cc>
    
    <cc>enrica</cc>
    
    <cc>jparent</cc>
    
    <cc>mitz</cc>
    
    <cc>playmobil</cc>
    
    <cc>tony</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>215493</commentid>
    <comment_count>0</comment_count>
    <who name="Ojan Vafai">ojan</who>
    <bug_when>2010-04-21 14:08:29 -0700</bug_when>
    <thetext>Crashes in a WebKit nightly and in Chrome dev channel. Does not crash in Safari 4. I&apos;m guessing this is a recent regression since the repro steps are so simple.

You can see the crash in gmail doing the following steps:
1. Click to compose a new message
2. Type multiple words in a RTL language, e.g. Hebrew: &quot;אחת שתיים שלוש&quot;
4. Select one of the words
5. Click the Link button


A JS snippet that reproduces the crash (thanks Julie!):

var div = document.createElement(&apos;div&apos;);
div.contentEditable = &apos;true&apos;;
div.innerHTML = &quot;אחת ש&lt;a id=&apos;bar&apos;&gt;תיים &lt;/a&gt;שלוש&quot;;
document.body.appendChild(div);
div.focus();

var sel = window.getSelection();
sel.selectAllChildren(bar);
var range = sel.getRangeAt(0);
range.insertNode(document.createElement(&apos;span&apos;));
range.detach();

// This part can be any number of actions, e.g., clicking anywhere on the page also crashes.
sel.selectAllChildren(bar);</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>215644</commentid>
    <comment_count>1</comment_count>
      <attachid>54013</attachid>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2010-04-21 19:04:36 -0700</bug_when>
    <thetext>Created attachment 54013
test case (will crash)

Same test as an attachment.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>215645</commentid>
    <comment_count>2</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2010-04-21 19:05:17 -0700</bug_when>
    <thetext>&lt;rdar://problem/7892035&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>215646</commentid>
    <comment_count>3</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2010-04-21 19:06:43 -0700</bug_when>
    <thetext>Asserts in debug build:

ASSERTION FAILED: i &lt; size()
(/Users/ap/Safari/OpenSource/WebKitBuild/Debug/JavaScriptCore.framework/PrivateHeaders/Vector.h:533 T&amp; WTF::Vector&lt;T, inlineCapacity&gt;::at(size_t) [with T = WebCore::InlineTextBox*, long unsigned int inlineCapacity = 0ul])</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>215952</commentid>
    <comment_count>4</comment_count>
    <who name="Julie Parent">jparent</who>
    <bug_when>2010-04-22 10:39:58 -0700</bug_when>
    <thetext>I can repro this in webkit back as far as r31256 (don&apos;t have working builds from any further back).</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>215954</commentid>
    <comment_count>5</comment_count>
    <who name="Ojan Vafai">ojan</who>
    <bug_when>2010-04-22 10:43:40 -0700</bug_when>
    <thetext>Huh...I was wrong. This does happen in Safari 4. I guess I&apos;m not sure if this is a regression. Can&apos;t get a WebKit nightly to run older than r31256.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>216287</commentid>
    <comment_count>6</comment_count>
      <attachid>54133</attachid>
    <who name="Tony Chang">tony</who>
    <bug_when>2010-04-22 23:21:01 -0700</bug_when>
    <thetext>Created attachment 54133
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>216288</commentid>
    <comment_count>7</comment_count>
    <who name="Tony Chang">tony</who>
    <bug_when>2010-04-22 23:23:57 -0700</bug_when>
    <thetext>I don&apos;t know this code well, but it seems like a simple NULL pointer in the RTL case.  If the text was not RTL, renderer-&gt;firstTextBox() would be NULL and nothing would happen.  I changed the code before the crash to catch the case with no text boxes and exit early.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>216290</commentid>
    <comment_count>8</comment_count>
      <attachid>54133</attachid>
    <who name="">mitz</who>
    <bug_when>2010-04-22 23:35:54 -0700</bug_when>
    <thetext>Comment on attachment 54133
Patch

Thanks for tackling this bug!

&gt; -    if (!renderer-&gt;firstTextBox() &amp;&amp; str.length() &gt; 0) {
&gt; -        m_lastTextNodeEndedWithCollapsedSpace = true; // entire block is collapsed space
&gt; +    if (!renderer-&gt;firstTextBox()) {
&gt; +        if (str.length() &gt; 0)
&gt; +            m_lastTextNodeEndedWithCollapsedSpace = true; // entire block is collapsed space
&gt;          return true;
&gt;      }

I am afraid that this fix may be wrong, because it doesn’t reset m_textBox in this case. I would feel much better with a fix that didn’t return early here, but instead just changed this

m_textBox = renderer-&gt;containsReversedText() ? m_sortedTextBoxes[0] : renderer-&gt;firstTextBox();

to say

m_textBox = renderer-&gt;containsReversedText() ? (m_sortedTextBoxes.size() ? m_sortedTextBoxes[0] : 0) : renderer-&gt;firstTextBox();</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>216292</commentid>
    <comment_count>9</comment_count>
      <attachid>54135</attachid>
    <who name="Tony Chang">tony</who>
    <bug_when>2010-04-22 23:42:46 -0700</bug_when>
    <thetext>Created attachment 54135
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>216293</commentid>
    <comment_count>10</comment_count>
    <who name="Tony Chang">tony</who>
    <bug_when>2010-04-22 23:46:01 -0700</bug_when>
    <thetext>(In reply to comment #8)
&gt; I am afraid that this fix may be wrong, because it doesn’t reset m_textBox in
&gt; this case. I would feel much better with a fix that didn’t return early here,
&gt; but instead just changed this
&gt; 
&gt; m_textBox = renderer-&gt;containsReversedText() ? m_sortedTextBoxes[0] :
&gt; renderer-&gt;firstTextBox();
&gt; 
&gt; to say
&gt; 
&gt; m_textBox = renderer-&gt;containsReversedText() ? (m_sortedTextBoxes.size() ?
&gt; m_sortedTextBoxes[0] : 0) : renderer-&gt;firstTextBox();

Good point.  Updated.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>216300</commentid>
    <comment_count>11</comment_count>
    <who name="Tony Chang">tony</who>
    <bug_when>2010-04-23 00:04:47 -0700</bug_when>
    <thetext>Committed r58153: &lt;http://trac.webkit.org/changeset/58153&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>54013</attachid>
            <date>2010-04-21 19:04:36 -0700</date>
            <delta_ts>2010-04-21 19:04:36 -0700</delta_ts>
            <desc>test case (will crash)</desc>
            <filename>test.html</filename>
            <type>text/html</type>
            <size>496</size>
            <attacher name="Alexey Proskuryakov">ap</attacher>
            
              <data encoding="base64">77u/PGJvZHk+CjxzY3JpcHQ+CnZhciBkaXYgPSBkb2N1bWVudC5jcmVhdGVFbGVtZW50KCdkaXYn
KTsKZGl2LmNvbnRlbnRFZGl0YWJsZSA9ICd0cnVlJzsKZGl2LmlubmVySFRNTCA9ICLXkNeX16og
16k8YSBpZD0nYmFyJz7XqteZ15nXnSA8L2E+16nXnNeV16kiOwpkb2N1bWVudC5ib2R5LmFwcGVu
ZENoaWxkKGRpdik7CmRpdi5mb2N1cygpOwoKdmFyIHNlbCA9IHdpbmRvdy5nZXRTZWxlY3Rpb24o
KTsKc2VsLnNlbGVjdEFsbENoaWxkcmVuKGJhcik7CnZhciByYW5nZSA9IHNlbC5nZXRSYW5nZUF0
KDApOwpyYW5nZS5pbnNlcnROb2RlKGRvY3VtZW50LmNyZWF0ZUVsZW1lbnQoJ3NwYW4nKSk7CnJh
bmdlLmRldGFjaCgpOwoKLy8gVGhpcyBwYXJ0IGNhbiBiZSBhbnkgbnVtYmVyIG9mIGFjdGlvbnMs
IGUuZy4sIGNsaWNraW5nIGFueXdoZXJlIG9uIHRoZSBwYWdlIGFsc28gY3Jhc2hlcy4Kc2VsLnNl
bGVjdEFsbENoaWxkcmVuKGJhcik7Cjwvc2NyaXB0Pgo8L2JvZHk+Cg==
</data>

          </attachment>
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>54133</attachid>
            <date>2010-04-22 23:21:01 -0700</date>
            <delta_ts>2010-04-22 23:42:39 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-37950-20100423152059.patch</filename>
            <type>text/plain</type>
            <size>3229</size>
            <attacher name="Tony Chang">tony</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL0NoYW5nZUxvZyBiL0xheW91dFRlc3RzL0NoYW5nZUxv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</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>54135</attachid>
            <date>2010-04-22 23:42:46 -0700</date>
            <delta_ts>2010-04-22 23:55:24 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-37950-20100423154244.patch</filename>
            <type>text/plain</type>
            <size>3190</size>
            <attacher name="Tony Chang">tony</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL0NoYW5nZUxvZyBiL0xheW91dFRlc3RzL0NoYW5nZUxv
ZwppbmRleCAyZGU5MDM4Li5jNWJiNzczIDEwMDY0NAotLS0gYS9MYXlvdXRUZXN0cy9DaGFuZ2VM
b2cKKysrIGIvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTMgQEAKKzIwMTAtMDQt
MjIgIFRvbnkgQ2hhbmcgIDx0b255QGNocm9taXVtLm9yZz4KKworICAgICAgICBSZXZpZXdlZCBi
eSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBDcmFzaCBpbiBXZWJDb3JlOjpUZXh0SXRlcmF0
b3I6OmhhbmRsZVRleHROb2RlKCkgZW5jb3VudGVyZWQgaW4gR29vZ2xlIHJpY2gtdGV4dCBwcm9k
dWN0cworICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9Mzc5
NTAKKworICAgICAgICAqIGVkaXRpbmcvdGV4dC1pdGVyYXRvci9ydGwtc2VsZWN0aW9uLWNyYXNo
LWV4cGVjdGVkLnR4dDogQWRkZWQuCisgICAgICAgICogZWRpdGluZy90ZXh0LWl0ZXJhdG9yL3J0
bC1zZWxlY3Rpb24tY3Jhc2guaHRtbDogQWRkZWQuCisKIDIwMTAtMDQtMjIgIEphbWVzIFJvYmlu
c29uICA8amFtZXNyQGNocm9taXVtLm9yZz4KIAogICAgICAgICBVbnJldmlld2VkLCBleHBlY3Rh
dGlvbnMgb25seSBjaGFuZ2UuCmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9lZGl0aW5nL3RleHQt
aXRlcmF0b3IvcnRsLXNlbGVjdGlvbi1jcmFzaC1leHBlY3RlZC50eHQgYi9MYXlvdXRUZXN0cy9l
ZGl0aW5nL3RleHQtaXRlcmF0b3IvcnRsLXNlbGVjdGlvbi1jcmFzaC1leHBlY3RlZC50eHQKbmV3
IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMC4uMjE1NWFiMgotLS0gL2Rldi9udWxsCisr
KyBiL0xheW91dFRlc3RzL2VkaXRpbmcvdGV4dC1pdGVyYXRvci9ydGwtc2VsZWN0aW9uLWNyYXNo
LWV4cGVjdGVkLnR4dApAQCAtMCwwICsxLDIgQEAKK9eQ15fXqiDXqdeq15nXmdedINep15zXldep
CitUaGlzIHRlc3QgcGFzc2VzIGlmIGl0IGRvZXNuJ3QgY3Jhc2guCmRpZmYgLS1naXQgYS9MYXlv
dXRUZXN0cy9lZGl0aW5nL3RleHQtaXRlcmF0b3IvcnRsLXNlbGVjdGlvbi1jcmFzaC5odG1sIGIv
TGF5b3V0VGVzdHMvZWRpdGluZy90ZXh0LWl0ZXJhdG9yL3J0bC1zZWxlY3Rpb24tY3Jhc2guaHRt
bApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi5kZTI1MWUzCi0tLSAvZGV2L251
bGwKKysrIGIvTGF5b3V0VGVzdHMvZWRpdGluZy90ZXh0LWl0ZXJhdG9yL3J0bC1zZWxlY3Rpb24t
Y3Jhc2guaHRtbApAQCAtMCwwICsxLDIzIEBACis8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5
cGUiIGNvbnRlbnQ9InRleHQvaHRtbDtjaGFyc2V0PXV0Zi04IiAvPgorPGJvZHk+Cis8c2NyaXB0
PgoraWYgKHdpbmRvdy5sYXlvdXRUZXN0Q29udHJvbGxlcikKKyAgICBsYXlvdXRUZXN0Q29udHJv
bGxlci5kdW1wQXNUZXh0KCk7CisKK3ZhciBkaXYgPSBkb2N1bWVudC5jcmVhdGVFbGVtZW50KCdk
aXYnKTsKK2Rpdi5jb250ZW50RWRpdGFibGUgPSAndHJ1ZSc7CitkaXYuaW5uZXJIVE1MID0gIteQ
15fXqiDXqTxhIGlkPSdiYXInPteq15nXmdedIDwvYT7Xqdec15XXqSI7Citkb2N1bWVudC5ib2R5
LmFwcGVuZENoaWxkKGRpdik7CitkaXYuZm9jdXMoKTsKKwordmFyIHNlbCA9IHdpbmRvdy5nZXRT
ZWxlY3Rpb24oKTsKK3NlbC5zZWxlY3RBbGxDaGlsZHJlbihiYXIpOwordmFyIHJhbmdlID0gc2Vs
LmdldFJhbmdlQXQoMCk7CityYW5nZS5pbnNlcnROb2RlKGRvY3VtZW50LmNyZWF0ZUVsZW1lbnQo
J3NwYW4nKSk7CityYW5nZS5kZXRhY2goKTsKKworLy8gVGhpcyBwYXJ0IGNhbiBiZSBhbnkgbnVt
YmVyIG9mIGFjdGlvbnMsIGUuZy4sIGNsaWNraW5nIGFueXdoZXJlIG9uIHRoZSBwYWdlIGFsc28g
Y3Jhc2hlcy4KK3NlbC5zZWxlY3RBbGxDaGlsZHJlbihiYXIpOworPC9zY3JpcHQ+Cis8cD5UaGlz
IHRlc3QgcGFzc2VzIGlmIGl0IGRvZXNuJ3QgY3Jhc2guPC9wPgorPC9ib2R5PgpkaWZmIC0tZ2l0
IGEvV2ViQ29yZS9DaGFuZ2VMb2cgYi9XZWJDb3JlL0NoYW5nZUxvZwppbmRleCBiNzAxNjU3Li4z
ODRkODYzIDEwMDY0NAotLS0gYS9XZWJDb3JlL0NoYW5nZUxvZworKysgYi9XZWJDb3JlL0NoYW5n
ZUxvZwpAQCAtMSwzICsxLDE1IEBACisyMDEwLTA0LTIyICBUb255IENoYW5nICA8dG9ueUBjaHJv
bWl1bS5vcmc+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAg
ICAgQ3Jhc2ggaW4gV2ViQ29yZTo6VGV4dEl0ZXJhdG9yOjpoYW5kbGVUZXh0Tm9kZSgpIGVuY291
bnRlcmVkIGluIEdvb2dsZSByaWNoLXRleHQgcHJvZHVjdHMKKyAgICAgICAgaHR0cHM6Ly9idWdz
LndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTM3OTUwCisKKyAgICAgICAgVGVzdDogZWRpdGlu
Zy90ZXh0LWl0ZXJhdG9yL3J0bC1zZWxlY3Rpb24tY3Jhc2guaHRtbAorCisgICAgICAgICogZWRp
dGluZy9UZXh0SXRlcmF0b3IuY3BwOgorICAgICAgICAoV2ViQ29yZTo6VGV4dEl0ZXJhdG9yOjpo
YW5kbGVUZXh0Tm9kZSk6CisKIDIwMTAtMDQtMjIgIEFsZXhleSBQcm9za3VyeWFrb3YgIDxhcEBh
cHBsZS5jb20+CiAKICAgICAgICAgUmV2aWV3ZWQgYnkgRGFyaW4gQWRsZXIuCmRpZmYgLS1naXQg
YS9XZWJDb3JlL2VkaXRpbmcvVGV4dEl0ZXJhdG9yLmNwcCBiL1dlYkNvcmUvZWRpdGluZy9UZXh0
SXRlcmF0b3IuY3BwCmluZGV4IGUzODE0NTEuLjllNDQ4NDIgMTAwNjQ0Ci0tLSBhL1dlYkNvcmUv
ZWRpdGluZy9UZXh0SXRlcmF0b3IuY3BwCisrKyBiL1dlYkNvcmUvZWRpdGluZy9UZXh0SXRlcmF0
b3IuY3BwCkBAIC00NzQsNyArNDc0LDcgQEAgYm9vbCBUZXh0SXRlcmF0b3I6OmhhbmRsZVRleHRO
b2RlKCkKICAgICAgICAgbV9zb3J0ZWRUZXh0Qm94ZXNQb3NpdGlvbiA9IDA7CiAgICAgfQogICAg
IAotICAgIG1fdGV4dEJveCA9IHJlbmRlcmVyLT5jb250YWluc1JldmVyc2VkVGV4dCgpID8gbV9z
b3J0ZWRUZXh0Qm94ZXNbMF0gOiByZW5kZXJlci0+Zmlyc3RUZXh0Qm94KCk7CisgICAgbV90ZXh0
Qm94ID0gcmVuZGVyZXItPmNvbnRhaW5zUmV2ZXJzZWRUZXh0KCkgPyAobV9zb3J0ZWRUZXh0Qm94
ZXMuaXNFbXB0eSgpID8gMCA6IG1fc29ydGVkVGV4dEJveGVzWzBdKSA6IHJlbmRlcmVyLT5maXJz
dFRleHRCb3goKTsKICAgICBoYW5kbGVUZXh0Qm94KCk7CiAgICAgcmV0dXJuIHRydWU7CiB9Cg==
</data>
<flag name="review"
          id="38031"
          type_id="1"
          status="+"
          setter="mitz"
    />
          </attachment>
      

    </bug>

</bugzilla>