Bug 56652

Summary: chrome.dll!WebCoreTypingCommandmakeEditableRootEmpty ReadAV@NULL (9632b8c011239ef3fa014c15ec25f236)
Product: WebKit Reporter: Berend-Jan Wever <skylined>
Component: HTML EditingAssignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Normal CC: commit-queue, rniwa
Priority: P1    
Version: 528+ (Nightly build)   
Hardware: PC   
OS: Windows Vista   
Bug Depends on: 56771    
Bug Blocks:    
Attachments:
Description Flags
Patch none

Berend-Jan Wever
Reported 2011-03-18 10:16:18 PDT
Chromium: http://code.google.com/p/chromium/issues/detail?id=76690 Repro: <body onload="go()"></body> <script> function go() { document.open(); document.designMode="on"; var oSelection = window.getSelection(); oSelection.addRange(document.createRange()); document.execCommand("Delete"); } </script> id: chrome.dll!WebCore::TypingCommand::makeEditableRootEmpty ReadAV@NULL (9632b8c011239ef3fa014c15ec25f236) description: Attempt to read from unallocated NULL pointer+0x28 in chrome.dll!WebCore::TypingCommand::makeEditableRootEmpty application: Chromium 12.0.707.0 stack: chrome.dll!WebCore::TypingCommand::makeEditableRootEmpty chrome.dll!WebCore::TypingCommand::deleteKeyPressed chrome.dll!WebCore::TypingCommand::doApply chrome.dll!WebCore::EditCommand::apply chrome.dll!WebCore::TypingCommand::deleteKeyPressed chrome.dll!WebCore::executeDelete chrome.dll!WebCore::Editor::Command::execute chrome.dll!WebCore::Document::execCommand chrome.dll!WebCore::DocumentInternal::execCommandCallback chrome.dll!v8::internal::HandleApiCallHelper<...> chrome.dll!v8::internal::Builtin_HandleApiCall chrome.dll!v8::internal::Invoke chrome.dll!v8::internal::Execution::Call ...
Attachments
Patch (3.18 KB, patch)
2011-03-28 16:46 PDT, Emil A Eklund 		no flags
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Emil A Eklund
Comment 1 2011-03-28 16:46:54 PDT
Created attachment 87236 [details] Patch
WebKit Commit Bot
Comment 2 2011-03-29 05:10:21 PDT
Comment on attachment 87236 [details] Patch Clearing flags on attachment: 87236 Committed r82233: <http://trac.webkit.org/changeset/82233>
WebKit Commit Bot
Comment 3 2011-03-29 05:10:26 PDT
All reviewed patches have been landed. Closing bug.
Note You need to log in before you can comment on or make changes to this bug.