Bug 153104

Summary:

imported/blink/editing/text-iterator/read-past-cloned-first-letter.html crashes

Product:

WebKit

Reporter:

Beth Dakin <bdakin>

Component:

HTML Editing

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

bdakin, enrica, sam, thorton

Priority:

Version:

WebKit Nightly Build

Hardware:

Unspecified

OS:

Unspecified

Attachments:

Description	Flags
Patch	simon.fraser: review+

Description Beth Dakin 2016-01-14 13:18:20 PST

It is possible to make imported/blink/editing/text-iterator/read-past-cloned-first-letter.html crash by invoked wordRangeFromPosition() on the final document.

Comment 1 Beth Dakin 2016-01-14 13:22:26 PST

Created attachment 268995 [details]
Patch

Comment 2 Beth Dakin 2016-01-14 13:32:39 PST

Thanks Simon! http://trac.webkit.org/changeset/195072

I am investigating if there is a way to add a new test that would have crashed before this change.