Bug 48989

Summary: Crash in ApplyStyleCommand::surroundNodeRangeWithElement (preceded by assertion in ApplyStyleCommand::removeInlineStyle) when running editing/style/iframe-onload-crash.html on Windows
Product: WebKit Reporter: Adam Roben (:aroben) <aroben>
Component: HTML EditingAssignee: Ryosuke Niwa <rniwa>
Status: RESOLVED FIXED    
Severity: Normal CC: adele, darin, enrica, rniwa, robert
Priority: P2 Keywords: InRadar, LayoutTestFailure, PlatformOnly
Version: 528+ (Nightly build)   
Hardware: PC   
OS: Windows XP   
URL: http://build.webkit.org/results/Windows%20Release%20(Tests)/r71317%20(5990)/CrashLog_0aec_2010-11-04_03-32-53-109.txt

Description Adam Roben (:aroben) 2010-11-04 04:28:59 PDT
editing/style/iframe-onload-crash.html is crashing in ApplyStyleCommand::surroundNodeRangeWithElement on Windows. Before the crash, it hits an assertion in ApplyStyleCommand::removeInlineStyle.

Crash backtrace: http://build.webkit.org/results/Windows%20Release%20(Tests)/r71317%20(5990)/CrashLog_0aec_2010-11-04_03-32-53-109.txt
Assertion backtrace: http://build.webkit.org/results/Windows%20Debug%20(Tests)/r71298%20(21963)/CrashLog_0f58_2010-11-04_03-12-58-562.txt

I've added this test to the Windows Skipped file
Comment 1 Adam Roben (:aroben) 2010-11-04 04:34:57 PDT
This test has been crashing since it was added in r71288 http://trac.webkit.org/changeset/71288
Comment 2 Adam Roben (:aroben) 2010-11-04 04:36:19 PDT
Looks like Qt has the same problem. See bug 48967.
Comment 3 Adam Roben (:aroben) 2010-11-04 07:55:27 PDT
<rdar://problem/8630446>
Comment 4 Ryosuke Niwa 2010-11-04 14:31:01 PDT
I have a patch in the bug 48581 for this.
Comment 5 Ryosuke Niwa 2010-11-05 11:36:56 PDT
Fixed in http://trac.webkit.org/changeset/71431.