Summary: | ASSERTION FAILED: !listItems().size() || m_activeSelectionAnchorIndex >= 0 in WebCore::HTMLSelectElement::updateListBoxSelection | ||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
Product: | WebKit | Reporter: | Renata Hodovan <rhodovan.u-szeged> | ||||||||
Component: | Forms | Assignee: | Nobody <webkit-unassigned> | ||||||||
Status: | RESOLVED FIXED | ||||||||||
Severity: | Normal | CC: | benjamin, commit-queue, darin, kling, santosh.ma, tkent | ||||||||
Priority: | P2 | ||||||||||
Version: | 528+ (Nightly build) | ||||||||||
Hardware: | PC | ||||||||||
OS: | Linux | ||||||||||
Bug Depends on: | |||||||||||
Bug Blocks: | 116980 | ||||||||||
Attachments: |
|
Description
Renata Hodovan
2013-07-12 03:02:12 PDT
Created attachment 206518 [details]
Test case
Created attachment 206617 [details]
Patch
crash is happening becasue we are trying to call updateListBoxSelection even if the selection index are not valid i.e -1 its becasue the select element contain the disabled option element so the m_activeSelectionActiveIndex will be -1 when we call updateListBoxSelection Comment on attachment 206617 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=206617&action=review > LayoutTests/fast/forms/select/selectall-command-crash.html:1 > +<html> Missing DOCTYPE. Comment on attachment 206617 [details]
Patch
Wait, I’m not so sure anymore.
Comment on attachment 206617 [details]
Patch
Looks ok.
Created attachment 206958 [details]
patch for Landing
Comment on attachment 206958 [details] patch for Landing Clearing flags on attachment: 206958 Committed r152836: <http://trac.webkit.org/changeset/152836> All reviewed patches have been landed. Closing bug. |