Bug 223545

Summary: Crash in ReplaceSelectionCommand::doApply()
Product: WebKit Reporter: Julian Gonzalez <julian_a_gonzalez>
Component: HTML EditingAssignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Normal CC: ews-watchlist, mifenton, rniwa, wenson_hsieh
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
See Also: https://bugs.webkit.org/show_bug.cgi?id=223960
Attachments:
Description Flags
Patch none

Description Julian Gonzalez 2021-03-19 17:15:50 PDT
e.g.

frame #0: WebCore`WebCore::CompositeEditCommand::splitTreeToNode(WebCore::Node&, WebCore::Node&, bool)
frame #1: WebCore`WebCore::ReplaceSelectionCommand::doApply()
frame #2: WebCore`WebCore::CompositeEditCommand::apply()
frame #3: WebCore`WebCore::executeInsertFragment(WebCore::Frame&, WTF::Ref<WebCore::DocumentFragment, WTF::RawPtrTraits<WebCore::DocumentFragment> >&&)
frame #4: WebCore`WebCore::executeInsertNode(WebCore::Frame&, WTF::Ref<WebCore::Node, WTF::RawPtrTraits<WebCore::Node> >&&)
frame #5: WebCore`WebCore::executeInsertImage(WebCore::Frame&, WebCore::Event*, WebCore::EditorCommandSource, WTF::String const&)
frame #6: WebCore`WebCore::Document::execCommand(WTF::String const&, bool, WTF::String const&)

<rdar://problem/73938060>
Comment 1 Julian Gonzalez 2021-03-19 17:44:26 PDT
Created attachment 423794 [details]
Patch
Comment 2 EWS 2021-03-22 23:19:38 PDT
Committed r274847: <https://commits.webkit.org/r274847>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 423794 [details].