Bug 151488
| Summary: | ASSERTION FAILED: m_offset <= m_node->length() in DeleteFromTextNodeCommand::DeleteFromTextNodeCommand | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Carlos Garcia Campos <cgarcia> |
| Component: | HTML Editing | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED CONFIGURATION CHANGED | ||
| Severity: | Normal | CC: | ahmad.saleem792, rniwa |
| Priority: | P2 | ||
| Version: | WebKit Local Build | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Bug Depends on: | |||
| Bug Blocks: | 151442 | ||
Carlos Garcia Campos
This was revealed by new test added in bug #151442, but it's a different issue, since it can be reproduced without the patch. There's a bug in chromium as well that contains a test case to reproduce it, see https://code.google.com/p/chromium/issues/detail?id=504932
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Ahmad Saleem
I took the test case from Chromium bug and changed it to JSFiddle and it does not crash WebKit Debug build based of 260689@main on WK2 minibrowser window.
Do we need to track it?
Ryosuke Niwa
Sounds like config changed to me.