Bug 35836

Summary:

Crash when backspacing floats with whitespace: pre-wrap.

Product:

WebKit

Reporter:

Steven Wittens <steven>

Component:

HTML Editing

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

ap, dbates, enrica, rniwa, wcarss

Priority:

Version:

528+ (Nightly build)

Hardware:

Mac (Intel)

OS:

OS X 10.6

Attachments:

Description	Flags
Minimal testcase	none
Crash backtrace	none

Steven Wittens

Reported 2010-03-06 17:55:27 PST

Given a contentEditable div, containing two floats. The first float is normal and contains text. The second float is set to white-space: pre-wrap and contains only white space. Steps to reproducte: 1) Load attached HTML file 2) Place the caret inside the first float at the end of its (text) contents. 3) Press backspace to delete the text Expected result: The first float is emptied or deleted. Actual result: Crash. Other notes: This bug was discovered while trying to implement an advanced tokenized input field. The odd empty pre-wrap div was placed in an attempt to create more possible caret positions. The test case does not crash if: a) The second float is set to white-space: default. OR b) The second float contains text instead of white space. OR c) The second float is empty.

Attachments
Minimal testcase (661 bytes, text/html) 2010-03-06 17:56 PST, Steven Wittens	no flags	Details
Crash backtrace (37.07 KB, text/plain) 2010-03-08 16:17 PST, Daniel Bates	no flags	Details
View All Add attachment proposed patch, testcase, etc.

Steven Wittens

Comment 1 2010-03-06 17:56:11 PST

Created attachment 50160 [details] Minimal testcase

Daniel Bates

Comment 2 2010-03-08 16:15:40 PST

Confirmed using Mac WebKit nightly r55610. Thanks Steven for reporting this and creating a test case!

Daniel Bates

Comment 3 2010-03-08 16:17:25 PST

Created attachment 50264 [details] Crash backtrace Crash backtrace.

Wyatt Carss

Comment 4 2011-08-17 14:48:47 PDT

This bug does not reproduce for me on TOT under Linux or Mac.

Note You need to log in before you can comment on or make changes to this bug.