Bug 129808

Summary: ASSERTION FAILED: isCaret() in FrameSelection::caretBlinkTimerFired()
Product: WebKit Reporter: Daniel Bates <dbates>
Component: HTML EditingAssignee: Nobody <webkit-unassigned>
Status: NEW ---    
Severity: Normal CC: ap, enrica, mmaxfield, rniwa
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Test case
none
[Web Archive] https://www.google.com/#q=apple+inc
none
Stack trace none

Description Daniel Bates 2014-03-06 10:57:47 PST
Using a build of WebKit with assertions enabled (say, a debug build). Perform the following in a new window:

1. Visit <https://www.google.com/#q=apple+inc>.
2. Without loss of generality, place the text insertion point before the 'i' in "inc" in the search field at the top of the page.
3. Press the down arrow on the keyboard to open the suggestions panel.
4. Press the down arrow on the keyboard to select the first suggestion "apple inc".
5. Press the return key on the keyboard.

Then we crash at ASSERT(isCaret()) in FrameSelection::caretBlinkTimerFired().
Comment 1 Daniel Bates 2014-03-06 10:59:13 PST
Created attachment 226008 [details]
Test case

A test case that triggers the assertion failure.
Comment 2 Daniel Bates 2014-03-06 11:01:08 PST
Created attachment 226009 [details]
[Web Archive] https://www.google.com/#q=apple+inc

For historical preservation, attached a web archive of <https://www.google.com/#q=apple+inc> as it appeared on 03/06/2014 @ 11:00 AM PST.
Comment 3 Daniel Bates 2014-03-06 11:07:07 PST
Created attachment 226012 [details]
Stack trace