<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>9429</bug_id>
          
          <creation_ts>2006-06-13 15:12:49 -0700</creation_ts>
          <short_desc>Assertion fails in HTMLInputElement::setValueFromRenderer after deleting text</short_desc>
          <delta_ts>2006-06-13 16:49:34 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Forms</component>
          <version>420+</version>
          <rep_platform>Mac</rep_platform>
          <op_sys>OS X 10.4</op_sys>
          <bug_status>CLOSED</bug_status>
          <resolution>DUPLICATE</resolution>
          <dup_id>9358</dup_id>
          
          <bug_file_loc>http://mapquest.com</bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="John Sullivan">sullivan</reporter>
          <assigned_to name="Adele Peterson">adele</assigned_to>
          
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>45513</commentid>
    <comment_count>0</comment_count>
    <who name="John Sullivan">sullivan</who>
    <bug_when>2006-06-13 15:12:49 -0700</bug_when>
    <thetext>To reproduce:

1. Visit http://mapquest.com -- the insertion point is in an address field
2. type one character (or more)
3. backspace over the typed text

This hits:

    ASSERT(value == constrainValue(value));

in HTMLInputElement::setValueFromRenderer

Partial backtrace is:

#0  0x01d9de90 in WebCore::HTMLInputElement::setValueFromRenderer (this=0x28ea5eb0, value=@0xbfffe410) at /Volumes/Big/johnsullivan/Projects/Labyrinth/OpenSource/WebCore/html/HTMLInputElement.cpp:1068
#1  0x01eec444 in WebCore::RenderTextField::subtreeHasChanged (this=0x28ea617c) at /Volumes/Big/johnsullivan/Projects/Labyrinth/OpenSource/WebCore/rendering/RenderTextField.cpp:239
#2  0x01f921c4 in WebCore::HTMLTextFieldInnerElement::defaultEventHandler (this=0x28ea6230, evt=0x29199780) at /Volumes/Big/johnsullivan/Projects/Labyrinth/OpenSource/WebCore/html/HTMLTextFieldInnerElement.cpp:56
#3  0x01f952a8 in WebCore::EventTargetNode::dispatchGenericEvent (this=0x28ea6230, e=@0xbfffe568, tempEvent=true) at /Volumes/Big/johnsullivan/Projects/Labyrinth/OpenSource/WebCore/dom/EventTargetNode.cpp:249
#4  0x01f95b48 in WebCore::EventTargetNode::dispatchEvent (this=0x28ea6230, e=@0xbfffe5c8, ec=@0xbfffe5cc, tempEvent=true) at /Volumes/Big/johnsullivan/Projects/Labyrinth/OpenSource/WebCore/dom/EventTargetNode.cpp:282
#5  0x01dc055c in WebCore::dispatchEditableContentChangedEvent (root=0x28ea6230) at /Volumes/Big/johnsullivan/Projects/Labyrinth/OpenSource/WebCore/page/Frame.cpp:2026
#6  0x01dc09c4 in WebCore::Frame::appliedEditing (this=0x1395e730, cmd=@0xbfffe708) at /Volumes/Big/johnsullivan/Projects/Labyrinth/OpenSource/WebCore/page/Frame.cpp:2035
#7  0x01f5bc1c in WebCore::TypingCommand::typingAddedToOpenCommand (this=0x291985a0) at /Volumes/Big/johnsullivan/Projects/Labyrinth/OpenSource/WebCore/editing/TypingCommand.cpp:246
#8  0x01f5c094 in WebCore::TypingCommand::deleteKeyPressed (this=0x291985a0) at /Volumes/Big/johnsullivan/Projects/Labyrinth/OpenSource/WebCore/editing/TypingCommand.cpp:346
#9  0x01f5c9b0 in WebCore::TypingCommand::deleteKeyPressed (document=0x140c0c00, smartDelete=false) at /Volumes/Big/johnsullivan/Projects/Labyrinth/OpenSource/WebCore/editing/TypingCommand.cpp:64
#10 0x01e010a4 in -[WebCoreFrameBridge deleteKeyPressedWithSmartDelete:] (self=0x1395f0f0, _cmd=0x12ff9dc, smartDelete=0 &apos;\0&apos;) at /Volumes/Big/johnsullivan/Projects/Labyrinth/OpenSource/WebCore/bridge/mac/WebCoreFrameBridge.mm:2160
#11 0x01260eac in -[WebHTMLView(WebHTMLViewFileInternal) _deleteRange:killRing:prepend:smartDeleteOK:deletionAction:] (self=0x139f77a0, _cmd=0x12ff1dc, range=0x291cae10, killRing=0 &apos;\0&apos;, prepend=0 &apos;\0&apos;, smartDeleteOK=0 &apos;\0&apos;, deletionAction=deleteKeyAction) at /Volumes/Big/johnsullivan/Projects/Labyrinth/OpenSource/WebKit/WebView/WebHTMLView.m:606
#12 0x0127a2dc in -[WebHTMLView _deleteWithDirection:granularity:killRing:isTypingAction:] (self=0x139f77a0, _cmd=0x12fda00, direction=WebBridgeSelectBackward, granularity=WebBridgeSelectByCharacter, killRing=0 &apos;\0&apos;, isTypingAction=1 &apos;\001&apos;) at /Volumes/Big/johnsullivan/Projects/Labyrinth/OpenSource/WebKit/WebView/WebHTMLView.m:4540
#13 0x0127a40c in -[WebHTMLView deleteBackward:] (self=0x139f77a0, _cmd=0x90a94df0, sender=0x0) at /Volumes/Big/johnsullivan/Projects/Labyrinth/OpenSource/WebKit/WebView/WebHTMLView.m:4555
&lt;...&gt;

Not sure if this more of a Forms problem or more of an HTML editing problem. I haven&apos;t tried it on a release build so I don&apos;t know if there are symptoms beyond the assertion failure.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>45516</commentid>
    <comment_count>1</comment_count>
    <who name="David Kilzer (:ddkilzer)">ddkilzer</who>
    <bug_when>2006-06-13 15:47:22 -0700</bug_when>
    <thetext>

*** This bug has been marked as a duplicate of 9358 ***</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>45520</commentid>
    <comment_count>2</comment_count>
    <who name="John Sullivan">sullivan</who>
    <bug_when>2006-06-13 16:49:34 -0700</bug_when>
    <thetext>Yup, closing.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>