Bug 202899

Summary:	Chromium test-case asserts with ASSERTION FAILED: candidate.isCandidate() in editing code.
Product:	WebKit	Reporter:	Emilio Cobos Álvarez (:emilio) <emilio>
Component:	HTML Editing	Assignee:	Nobody <webkit-unassigned>
Status:	NEW
Severity:	Normal	CC:	rniwa, webkit-bug-importer, wenson_hsieh
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified

Emilio Cobos Álvarez (:emilio)

Reported 2019-10-13 13:50:35 PDT

On master (247b0314320d499ae788b6ea993aa1d98e2d607e / r250962), WebKitGTK build. Running this test-case locally: * https://cs.chromium.org/chromium/src/third_party/blink/web_tests/editing/execCommand/insert-list-br-with-child-crash.html?rcl=753caf715d8f30f0c673f1b4b36dadfc75c3201f Asserts like: ASSERTION FAILED: candidate.isCandidate() ../../Source/WebCore/editing/VisiblePosition.cpp(537) : WebCore::Position WebCore::canonicalizeCandidate(const WebCore::Position&) 1 0x7f97f2c703d3 /home/emilio/src/WebKit/WebKitBuild/Debug/lib/libjavascriptcoregtk-4.0.so.18(WTFCrash+0x9) [0x7f97f2c703d3] 2 0x7f97fe9195f2 /home/emilio/src/WebKit/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN3WTF15CrashOnOverflow10overflowedEv+0) [0x7f97fe9195f2] 3 0x7f9800f46329 /home/emilio/src/WebKit/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(+0xcc08329) [0x7f9800f46329] 4 0x7f9800f46563 /home/emilio/src/WebKit/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore15VisiblePosition17canonicalPositionERKNS_8PositionE+0x1d7) [0x7f9800f46563] 5 0x7f9800f4427b /home/emilio/src/WebKit/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore15VisiblePosition4initERKNS_8PositionENS_9EAffinityE+0x37) [0x7f9800f4427b] 6 0x7f9800f44241 /home/emilio/src/WebKit/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore15VisiblePositionC2ERKNS_8PositionENS_9EAffinityE+0x35) [0x7f9800f44241] 7 0x7f9800f07c8f /home/emilio/src/WebKit/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore17InsertListCommand18unlistifyParagraphERKNS_15VisiblePositionEPNS_11HTMLElementEPNS_4NodeE+0x119) [0x7f9800f07c8f] 8 0x7f9800f07ab4 /home/emilio/src/WebKit/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore17InsertListCommand25doApplyForSingleParagraphEbRKNS_17HTMLQualifiedNameEPNS_5RangeE+0x89c) [0x7f9800f07ab4] 9 0x7f9800f071a0 /home/emilio/src/WebKit/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore17InsertListCommand7doApplyEv+0x8e8) [0x7f9800f071a0] 10 0x7f98024fccd3 /home/emilio/src/WebKit/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore20CompositeEditCommand5applyEv+0xf5) [0x7f98024fccd3] 11 0x7f9800ee0dc7 /home/emilio/src/WebKit/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(+0xcba2dc7) [0x7f9800ee0dc7] 12 0x7f9800ee462a /home/emilio/src/WebKit/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZNK7WebCore6Editor7Command7executeERKN3WTF6StringEPNS_5EventE+0xdc) [0x7f9800ee462a] 13 0x7f9800ccf268 /home/emilio/src/WebKit/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore8Document11execCommandERKN3WTF6StringEbS4_+0x56) [0x7f9800ccf268] 14 0x7f97ff9dd694 /home/emilio/src/WebKit/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(+0xb69f694) [0x7f97ff9dd694] 15 0x7f97ff9f71b6 /home/emilio/src/WebKit/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(+0xb6b91b6) [0x7f97ff9f71b6] 16 0x7f97ff9dd702 /home/emilio/src/WebKit/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore38jsDocumentPrototypeFunctionExecCommandEPN3JSC14JSGlobalObjectEPNS0_9CallFrameE+0x23) [0x7f97ff9dd702] 17 0x7f979d1fa16b [0x7f979d1fa16b

Attachments
Add attachment proposed patch, testcase, etc.

Radar WebKit Bug Importer

Comment 1 2019-10-14 17:24:57 PDT

<rdar://problem/56271325>

Note You need to log in before you can comment on or make changes to this bug.