<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>84991</bug_id>
          
          <creation_ts>2012-04-26 12:35:09 -0700</creation_ts>
          <short_desc>Add a test for crash in DOMSelection::deleteFromDocument</short_desc>
          <delta_ts>2012-04-26 17:20:02 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>HTML Editing</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          <dependson>44153</dependson>
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Ryosuke Niwa">rniwa</reporter>
          <assigned_to name="Ryosuke Niwa">rniwa</assigned_to>
          <cc>adele</cc>
    
    <cc>ap</cc>
    
    <cc>darin</cc>
    
    <cc>enrica</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>610830</commentid>
    <comment_count>0</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2012-04-26 12:35:09 -0700</bug_when>
    <thetext>We need a test for the bug 44153.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>610868</commentid>
    <comment_count>1</comment_count>
      <attachid>139050</attachid>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2012-04-26 13:03:52 -0700</bug_when>
    <thetext>Created attachment 139050
Adds a regression test</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>610883</commentid>
    <comment_count>2</comment_count>
      <attachid>139050</attachid>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2012-04-26 13:16:31 -0700</bug_when>
    <thetext>Comment on attachment 139050
Adds a regression test

View in context: https://bugs.webkit.org/attachment.cgi?id=139050&amp;action=review

&gt; LayoutTests/editing/selection/deleteFromDocument-after-document-open-crash.html:25
&gt; +    layoutTestController.notifyDone();

This test doesn&apos;t appear to need waitUntilDone/notifyDone - all the work is done from unload.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>610884</commentid>
    <comment_count>3</comment_count>
      <attachid>139050</attachid>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2012-04-26 13:18:00 -0700</bug_when>
    <thetext>Comment on attachment 139050
Adds a regression test

View in context: https://bugs.webkit.org/attachment.cgi?id=139050&amp;action=review

&gt;&gt; LayoutTests/editing/selection/deleteFromDocument-after-document-open-crash.html:25
&gt;&gt; +    layoutTestController.notifyDone();
&gt; 
&gt; This test doesn&apos;t appear to need waitUntilDone/notifyDone - all the work is done from unload.

document.open() sometimes ends DRT so without this, the test will be flaky.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>610900</commentid>
    <comment_count>4</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2012-04-26 13:32:10 -0700</bug_when>
    <thetext>&gt; document.open() sometimes ends DRT so without this, the test will be flaky.

How can this possibly be non-deterministic? Is there an uninitialized variable somewhere?

Looks like you&apos;re covering up a real bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>610916</commentid>
    <comment_count>5</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2012-04-26 13:37:49 -0700</bug_when>
    <thetext>(In reply to comment #4)
&gt; &gt; document.open() sometimes ends DRT so without this, the test will be flaky.
&gt; 
&gt; How can this possibly be non-deterministic? Is there an uninitialized variable somewhere?
&gt; 
&gt; Looks like you&apos;re covering up a real bug.

Maybe. The last time I checked, this was expected behavior per spec and non-determinism was due to some race conditions. But then I&apos;m not too familiar with this area.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>610958</commentid>
    <comment_count>6</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2012-04-26 14:06:38 -0700</bug_when>
    <thetext>Hm... it appears that this problem no longer reproduces at least on this test. I&apos;m gonna just remove waitUntilDone/notifyDone for now.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>610961</commentid>
    <comment_count>7</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2012-04-26 14:09:26 -0700</bug_when>
    <thetext>Committed r115360: &lt;http://trac.webkit.org/changeset/115360&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>611070</commentid>
    <comment_count>8</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2012-04-26 16:30:47 -0700</bug_when>
    <thetext>&gt; it appears that this problem no longer reproduces at least on this test

Perhaps it&apos;s more complicated when the script runs during load, as opposed to unload handler.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>611083</commentid>
    <comment_count>9</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2012-04-26 16:48:25 -0700</bug_when>
    <thetext>(In reply to comment #8)
&gt; &gt; it appears that this problem no longer reproduces at least on this test
&gt; 
&gt; Perhaps it&apos;s more complicated when the script runs during load, as opposed to unload handler.

Hm... that&apos;s possible. I guess Chromium WebKit gardeners will notice if this test becomes flaky :)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>611113</commentid>
    <comment_count>10</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2012-04-26 17:20:02 -0700</bug_when>
    <thetext>&gt; unload

onload, thank you autocorrection :)</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>139050</attachid>
            <date>2012-04-26 13:03:52 -0700</date>
            <delta_ts>2012-04-26 13:18:00 -0700</delta_ts>
            <desc>Adds a regression test</desc>
            <filename>bug-84991-20120426130351.patch</filename>
            <type>text/plain</type>
            <size>2315</size>
            <attacher name="Ryosuke Niwa">rniwa</attacher>
            
              <data encoding="base64">SW5kZXg6IExheW91dFRlc3RzL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09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</data>
<flag name="review"
          id="144598"
          type_id="1"
          status="+"
          setter="ap"
    />
    <flag name="commit-queue"
          id="144605"
          type_id="3"
          status="-"
          setter="ap"
    />
          </attachment>
      

    </bug>

</bugzilla>