Bug 11003
Summary: | Gmail Editor: Crash at WebCore::Range::startPosition() when decreasing a indent | ||
---|---|---|---|
Product: | WebKit | Reporter: | Chris Petersen <c.petersen87> |
Component: | HTML Editing | Assignee: | Nobody <webkit-unassigned> |
Status: | RESOLVED FIXED | ||
Severity: | Normal | CC: | mitz |
Priority: | P1 | Keywords: | GoogleBug, InRadar |
Version: | 420+ | ||
Hardware: | Mac | ||
OS: | OS X 10.4 | ||
Bug Depends on: | |||
Bug Blocks: | 9638 |
Chris Petersen
When attempting to decrease a indent that was applied to a list in a Gmail HTML message, a crash occurs
WebCore::Range::startPosition()
* STEPS TO REPRODUCE
1. With TOT webkit r-16541, login into your gmail account
2. Create a new message (Rich Formatting)
3. Place caret in message body and type some text
4. Click on either the ordered or unordered list toolbar icon
5. Press the "Indent More" toolbar icon.
6. Now, press the "Indent less" toolbar icon
7. Instead of removing the indent, a crash occurs
* RESULTS
Indent should be removed but a crash occurs instead
Attachments | ||
---|---|---|
Add attachment proposed patch, testcase, etc. |
Chris Petersen
This has been filed as <rdar://problem/4747695>
mitz
ASSERTION FAILED: destination.deepEquivalent().node()->inDocument() (WebCore/editing/CompositeEditCommand.cpp:662 void WebCore::CompositeEditCommand::moveParagraphs(const WebCore::VisiblePosition&, const WebCore::VisiblePosition&, const WebCore::VisiblePosition&, bool, bool))
[Reproducible crashes are P1]
Justin Garcia
r16587