Bug 223545

Summary:

Crash in ReplaceSelectionCommand::doApply()

Product:

WebKit

Reporter:

Julian Gonzalez <julian_a_gonzalez>

Component:

HTML Editing

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

ews-watchlist, mifenton, rniwa, wenson_hsieh

Priority:

Keywords:

InRadar

Version:

WebKit Nightly Build

Hardware:

Unspecified

OS:

Unspecified

See Also:

https://bugs.webkit.org/show_bug.cgi?id=223960

Attachments:

Description	Flags
Patch	none

Description Julian Gonzalez 2021-03-19 17:15:50 PDT

e.g.

frame #0: WebCore`WebCore::CompositeEditCommand::splitTreeToNode(WebCore::Node&, WebCore::Node&, bool)
frame #1: WebCore`WebCore::ReplaceSelectionCommand::doApply()
frame #2: WebCore`WebCore::CompositeEditCommand::apply()
frame #3: WebCore`WebCore::executeInsertFragment(WebCore::Frame&, WTF::Ref<WebCore::DocumentFragment, WTF::RawPtrTraits<WebCore::DocumentFragment> >&&)
frame #4: WebCore`WebCore::executeInsertNode(WebCore::Frame&, WTF::Ref<WebCore::Node, WTF::RawPtrTraits<WebCore::Node> >&&)
frame #5: WebCore`WebCore::executeInsertImage(WebCore::Frame&, WebCore::Event*, WebCore::EditorCommandSource, WTF::String const&)
frame #6: WebCore`WebCore::Document::execCommand(WTF::String const&, bool, WTF::String const&)

<rdar://problem/73938060>

Comment 1 Julian Gonzalez 2021-03-19 17:44:26 PDT

Created attachment 423794 [details]
Patch

Comment 2 EWS 2021-03-22 23:19:38 PDT

Committed r274847: <https://commits.webkit.org/r274847>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 423794 [details].