Bug 136969

Summary:

WebContent crash in WebKit::WebPage::expandedRangeFromHandle

Product:

WebKit

Reporter:

Ryosuke Niwa <rniwa>

Component:

WebKit2

Assignee:

Ryosuke Niwa <rniwa>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

benjamin, darin, ddkilzer, enrica, ggaren, sam

Priority:

Keywords:

InRadar

Version:

528+ (Nightly build)

Hardware:

Unspecified

OS:

Unspecified

Attachments:

Description	Flags
Fixes the crash	none

Description Ryosuke Niwa 2014-09-19 18:46:28 PDT

Thread 0 Crashed:
0   WebKit                        	0x0000000187596328 WebKit::WebPage::expandedRangeFromHandle(WebCore::Range*, WebKit::SelectionHandlePosition) + 576 (Ref.h:60)
1   WebKit                        	0x0000000187596318 WebKit::WebPage::expandedRangeFromHandle(WebCore::Range*, WebKit::SelectionHandlePosition) + 560 (WebPageIOS.mm:1140)
2   WebKit                        	0x0000000187597084 WebKit::WebPage::computeExpandAndShrinkThresholdsForHandle(WebCore::IntPoint const&, WebKit::SelectionHandlePosition, float&, float&) + 132 (WebPageIOS.mm:1330)
3   WebKit                        	0x000000018759750c WebKit::WebPage::updateBlockSelectionWithTouch(WebCore::IntPoint const&, unsigned int, unsigned int) + 160 (WebPageIOS.mm:1430)

<rdar://problem/17878728>

Comment 1 Ryosuke Niwa 2014-09-19 18:54:50 PDT

Created attachment 238402 [details]
Fixes the crash

Comment 2 David Kilzer (:ddkilzer) 2014-09-19 19:18:47 PDT

Comment on attachment 238402 [details]
Fixes the crash

r=me

Comment 3 Ryosuke Niwa 2014-09-19 20:08:21 PDT

Comment on attachment 238402 [details]
Fixes the crash

Clearing flags on attachment: 238402

Committed r173788: <http://trac.webkit.org/changeset/173788>

Comment 4 Ryosuke Niwa 2014-09-19 20:08:24 PDT

All reviewed patches have been landed.  Closing bug.