Bug 48646

Summary:	REGRESSION: Assertion failure in TextCheckingHelper::TextCheckingHelper(), followed by crash
Product:	WebKit	Reporter:	mitz
Component:	HTML Editing	Assignee:	Nobody <webkit-unassigned>
Status:	RESOLVED DUPLICATE
Severity:	Normal	CC:	jiapu.mail, morrita
Priority:	P1	Keywords:	Regression
Version:	528+ (Nightly build)
Hardware:	All
OS:	All

mitz

Reported 2010-10-29 10:36:21 PDT

The ASSERT_ARG(m_range, m_range) in the TextCheckingHelper constructor is failing with this backtrace: #0 0x103da002e in WebCore::TextCheckingHelper::TextCheckingHelper at TextCheckingHelper.cpp:42 #1 0x103d9ff1d in WebCore::TextCheckingHelper::TextCheckingHelper at TextCheckingHelper.cpp:40 #2 0x1031935f9 in WebCore::Editor::markAllMisspellingsAndBadGrammarInRanges at Editor.cpp:2190 #3 0x10318e5d4 in WebCore::Editor::correctionPanelTimerFired at Editor.cpp:2424 #4 0x10319d40c in WebCore::Timer<WebCore::Editor>::fired at Timer.h:98 #5 0x103dcd783 in WebCore::ThreadTimers::sharedTimerFiredInternal at ThreadTimers.cpp:112 #6 0x103dcd539 in WebCore::ThreadTimers::sharedTimerFired at ThreadTimers.cpp:90 #7 0x103c35959 in WebCore::timerFired at SharedTimerMac.mm:166 The grammarRange parameter to markAllMisspellingsAndBadGrammarInRanges() is allowed to be 0, but now this method tries to use it to construct a TextCheckingHelper without checking.

Attachments
Add attachment proposed patch, testcase, etc.

mitz

Comment 1 2010-10-29 10:37:57 PDT

In release builds, this leads to a crash.

mitz

Comment 2 2010-10-29 20:15:28 PDT

*** This bug has been marked as a duplicate of bug 48708 ***

Note You need to log in before you can comment on or make changes to this bug.