Bug 6160
| Summary: | REGRESSION: Crash when running editing/deleting/delete-3800834-fix.html | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Alexey Proskuryakov <ap> |
| Component: | HTML Editing | Assignee: | Nobody <webkit-unassigned> |
| Status: | CLOSED FIXED | ||
| Severity: | Critical | ||
| Priority: | P1 | ||
| Version: | 420+ | ||
| Hardware: | Mac | ||
| OS: | OS X 10.4 | ||
Alexey Proskuryakov
Steps to reproduce:
1. With a development build, run
$ run-webkit-tests editing/deleting/delete-3800834-fix.html
Results:
DumpRenderTree(4229,0xa000ed68) malloc: *** error for object 0x6a5d70: double free
DumpRenderTree(4229,0xa000ed68) malloc: *** set a breakpoint in szone_error to debug
=================
ASSERTION FAILED: exceptionCode == 0 (/Users/ap/WebKit/WebCore/khtml/editing/
append_node_command.cpp:64 virtual void khtml::AppendNodeCommand::doApply())
=================
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Justin Garcia
fixed