<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>47808</bug_id>
          
          <creation_ts>2010-10-18 03:32:33 -0700</creation_ts>
          <short_desc>chrome.dll!WebCore::RangeBoundaryPoint::toPosition ReadAV@NULL (cf0d0f28bc56f2591cc74f71b46036ea)</short_desc>
          <delta_ts>2010-12-01 11:51:09 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>HTML Editing</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>HasReduction</keywords>
          <priority>P1</priority>
          <bug_severity>Major</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Berend-Jan Wever">skylined</reporter>
          <assigned_to name="Ryosuke Niwa">rniwa</assigned_to>
          <cc>adele</cc>
    
    <cc>darin</cc>
    
    <cc>enrica</cc>
    
    <cc>eric</cc>
    
    <cc>jparent</cc>
    
    <cc>ojan</cc>
    
    <cc>rniwa</cc>
    
    <cc>tony</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>295422</commentid>
    <comment_count>0</comment_count>
    <who name="Berend-Jan Wever">skylined</who>
    <bug_when>2010-10-18 03:32:33 -0700</bug_when>
    <thetext>Repro:
&lt;html&gt;&lt;head&gt;&lt;script&gt;
  function go() {
    document.execCommand(&quot;selectall&quot;);
    document.designMode=&quot;on&quot;;
    document.execCommand(&quot;InsertLineBreak&quot;);
    document.execCommand(&quot;insertimage&quot;);
    document.execCommand(&quot;InsertOrderedList&quot;);
    document.execCommand(&quot;inserthtml&quot;, false, &quot;z&quot;);
    document.execCommand(&quot;InsertHorizontalRule&quot;);
    document.execCommand(&quot;selectall&quot;);
    document.execCommand(&quot;createlink&quot;, false, &quot;z&quot;);
    document.execCommand(&quot;insertunorderedlist&quot;);
  }
&lt;/script&gt;&lt;/head&gt;&lt;body onload=&quot;go();&quot;&gt;&lt;/body&gt;&lt;/html&gt;

stack:          chrome.dll!WebCore::RangeBoundaryPoint::toPosition
                chrome.dll!WebCore::InsertListCommand::doApply
                chrome.dll!WebCore::EditCommand::apply
                chrome.dll!WebCore::applyCommand
                chrome.dll!WebCore::executeInsertUnorderedList
                chrome.dll!WebCore::Editor::Command::execute
                chrome.dll!WebCore::Document::execCommand
                chrome.dll!WebCore::DocumentInternal::execCommandCallback
                ...</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>315480</commentid>
    <comment_count>1</comment_count>
      <attachid>75242</attachid>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2010-11-30 18:56:26 -0800</bug_when>
    <thetext>Created attachment 75242
fixes the crash</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>315711</commentid>
    <comment_count>2</comment_count>
      <attachid>75242</attachid>
    <who name="Tony Chang">tony</who>
    <bug_when>2010-12-01 10:04:13 -0800</bug_when>
    <thetext>Comment on attachment 75242
fixes the crash

View in context: https://bugs.webkit.org/attachment.cgi?id=75242&amp;action=review

&gt; WebCore/editing/InsertListCommand.cpp:163
&gt; +                    if (!lastSelectionRange)
&gt; +                        return;

Do you think it is likely for this to regress again?  This check doesn&apos;t seem to buy us much.

&gt; LayoutTests/editing/execCommand/switch-multiple-list-items-crash.html:1
&gt; +&lt;html&gt;&lt;head&gt;&lt;script&gt;

Nit: Can you add some text to this test (i.e., shouldn&apos;t crash and should print PASS)?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>315735</commentid>
    <comment_count>3</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2010-12-01 10:44:56 -0800</bug_when>
    <thetext>http://crbug.com/59557
http://crbug.com/64692

This is a blocker for Chromium milestone 9.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>315745</commentid>
    <comment_count>4</comment_count>
      <attachid>75242</attachid>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2010-12-01 11:00:57 -0800</bug_when>
    <thetext>Comment on attachment 75242
fixes the crash

View in context: https://bugs.webkit.org/attachment.cgi?id=75242&amp;action=review

&gt;&gt; WebCore/editing/InsertListCommand.cpp:163
&gt;&gt; +                        return;
&gt; 
&gt; Do you think it is likely for this to regress again?  This check doesn&apos;t seem to buy us much.

I&apos;m sure there are other bugs in moveParagraph (which uses DeleteSelectionCommand, ReplaceSelectionCommand, etc...) and moveParagraphWithClones, and exiting early is better than crashing since a user won&apos;t lose data.  Because the user can observe that not all paragraphs are listified or unlistified, they should be able to report bugs if this assertion hits.

&gt;&gt; LayoutTests/editing/execCommand/switch-multiple-list-items-crash.html:1
&gt;&gt; +&lt;html&gt;&lt;head&gt;&lt;script&gt;
&gt; 
&gt; Nit: Can you add some text to this test (i.e., shouldn&apos;t crash and should print PASS)?

I thought doing so will stop reproducing the crash but it seems like it&apos;s not affected.  Will add some explanation.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>315750</commentid>
    <comment_count>5</comment_count>
    <who name="Tony Chang">tony</who>
    <bug_when>2010-12-01 11:05:31 -0800</bug_when>
    <thetext>(In reply to comment #4)
&gt; (From update of attachment 75242 [details])
&gt; View in context: https://bugs.webkit.org/attachment.cgi?id=75242&amp;action=review
&gt; 
&gt; &gt;&gt; WebCore/editing/InsertListCommand.cpp:163
&gt; &gt;&gt; +                        return;
&gt; &gt; 
&gt; &gt; Do you think it is likely for this to regress again?  This check doesn&apos;t seem to buy us much.
&gt; 
&gt; I&apos;m sure there are other bugs in moveParagraph (which uses DeleteSelectionCommand, ReplaceSelectionCommand, etc...) and moveParagraphWithClones, and exiting early is better than crashing since a user won&apos;t lose data.  Because the user can observe that not all paragraphs are listified or unlistified, they should be able to report bugs if this assertion hits.

Won&apos;t we only get bug reports for debug builds (and if someone decides to file the bug)?  In the wild, we only get reports of the app crashes.  I&apos;m worried that this is papering over future bugs.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>315752</commentid>
    <comment_count>6</comment_count>
    <who name="Enrica Casucci">enrica</who>
    <bug_when>2010-12-01 11:07:21 -0800</bug_when>
    <thetext>The change looks good to me</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>315754</commentid>
    <comment_count>7</comment_count>
      <attachid>75242</attachid>
    <who name="Darin Adler">darin</who>
    <bug_when>2010-12-01 11:09:14 -0800</bug_when>
    <thetext>Comment on attachment 75242
fixes the crash

View in context: https://bugs.webkit.org/attachment.cgi?id=75242&amp;action=review

&gt;&gt;&gt;&gt; WebCore/editing/InsertListCommand.cpp:163
&gt;&gt;&gt;&gt; +                        return;
&gt;&gt;&gt; 
&gt;&gt;&gt; Do you think it is likely for this to regress again?  This check doesn&apos;t seem to buy us much.
&gt;&gt; 
&gt;&gt; I&apos;m sure there are other bugs in moveParagraph (which uses DeleteSelectionCommand, ReplaceSelectionCommand, etc...) and moveParagraphWithClones, and exiting early is better than crashing since a user won&apos;t lose data.  Because the user can observe that not all paragraphs are listified or unlistified, they should be able to report bugs if this assertion hits.
&gt; 
&gt; Won&apos;t we only get bug reports for debug builds (and if someone decides to file the bug)?  In the wild, we only get reports of the app crashes.  I&apos;m worried that this is papering over future bugs.

I think that “papering over” is OK in this case.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>315755</commentid>
    <comment_count>8</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2010-12-01 11:10:53 -0800</bug_when>
    <thetext>(In reply to comment #5)
&gt; Won&apos;t we only get bug reports for debug builds (and if someone decides to file the bug)?  In the wild, we only get reports of the app crashes.  I&apos;m worried that this is papering over future bugs.

Sure but I don&apos;t want to make debugging easier at the cost of user experience.  We also have similar sanity checks &amp; early exits in ApplyBlockElementCommand::formatSelection, which is used by FormatBlockCommand and IndentOutdentCommand.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>315757</commentid>
    <comment_count>9</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2010-12-01 11:11:36 -0800</bug_when>
    <thetext>Thanks for the review, Darin &amp; Tony.  I&apos;ll add the comment Tony mentioned and land.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>315782</commentid>
    <comment_count>10</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2010-12-01 11:51:09 -0800</bug_when>
    <thetext>Committed r73052: &lt;http://trac.webkit.org/changeset/73052&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>75242</attachid>
            <date>2010-11-30 18:56:26 -0800</date>
            <delta_ts>2010-12-01 11:09:14 -0800</delta_ts>
            <desc>fixes the crash</desc>
            <filename>bug-47808-20101130185625.patch</filename>
            <type>text/plain</type>
            <size>6988</size>
            <attacher name="Ryosuke Niwa">rniwa</attacher>
            
              <data encoding="base64">SW5kZXg6IFdlYkNvcmUvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09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</data>
<flag name="review"
          id="66009"
          type_id="1"
          status="+"
          setter="darin"
    />
          </attachment>
      

    </bug>

</bugzilla>