Bug 11077 – Writely Editor: Crash occurs at WebCore::maxDeepOffset(WebCore::Node const*) when attempting to create a OL/UL following a HR element

• Component: HTML Editing
• Status: RESOLVED FIXED

[Chris Petersen]

* SUMMARY
A crash occurs when attempting to create a OL/UL that follows a HR element

* STEPS TO REPRODUCE
1. With TOT webkit r16608 , login to your writely account (with gmail user name/password)
2. Create a new document (click new link)
3. From the Insert menu, select Horizontal Line
4. After HR is displayed, click on either the Numbered List or Ordered List icon
5. Crash occurs

* RESULTS
Unordered/Ordered list should be created below the HR element but instead a crash occurs


Thread 0 Crashed:
0   com.apple.WebCore        	0x011eb9e4 WebCore::maxDeepOffset(WebCore::Node const*) + 16
1   com.apple.WebCore        	0x011fdc39 WebCore::ReplaceSelectionCommand::doApply() + 2361
2   com.apple.WebCore        	0x011e9d96 WebCore::EditCommand::apply() + 40
3   com.apple.WebCore        	0x011dfb73 WebCore::CompositeEditCommand::applyCommandToComposite(WTF::PassRefPtr<WebCore::EditCommand>) + 41
4   com.apple.WebCore        	0x011e3100 WebCore::CompositeEditCommand::moveParagraphs(WebCore::VisiblePosition const&, WebCore::VisiblePosition const&, WebCore::VisiblePosition const&, bool, bool) + 2288
5   com.apple.WebCore        	0x012f0db3 WebCore::InsertListCommand::doApply() + 3831
6   com.apple.WebCore        	0x011e9d96 WebCore::EditCommand::apply() + 40
7   com.apple.WebCore        	0x011f4170 WebCore::(anonymous namespace)::execInsertOrderedList(WebCore::Frame*, bool, WebCore::String const&) + 84
8   com.apple.WebCore        	0x011f54dd WebCore::JSEditor::execCommand(WebCore::String const&, bool, WebCore::String const&) + 103
9   com.apple.WebCore        	0x0110d303 WebCore::Document::execCommand(WebCore::String const&, bool, WebCore::String const&) + 53
10  com.apple.WebCore        	0x0124fdb1 WebCore::JSDocumentProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 1429

[Chris Petersen]

This is covered in <rdar://problem/4755287>

[Justin Garcia]

r16728