Bug 6160
Summary: | REGRESSION: Crash when running editing/deleting/delete-3800834-fix.html | ||
---|---|---|---|
Product: | WebKit | Reporter: | Alexey Proskuryakov <ap> |
Component: | HTML Editing | Assignee: | Nobody <webkit-unassigned> |
Status: | CLOSED FIXED | ||
Severity: | Critical | ||
Priority: | P1 | ||
Version: | 420+ | ||
Hardware: | Mac | ||
OS: | OS X 10.4 |
Alexey Proskuryakov
Steps to reproduce:
1. With a development build, run
$ run-webkit-tests editing/deleting/delete-3800834-fix.html
Results:
DumpRenderTree(4229,0xa000ed68) malloc: *** error for object 0x6a5d70: double free
DumpRenderTree(4229,0xa000ed68) malloc: *** set a breakpoint in szone_error to debug
=================
ASSERTION FAILED: exceptionCode == 0 (/Users/ap/WebKit/WebCore/khtml/editing/
append_node_command.cpp:64 virtual void khtml::AppendNodeCommand::doApply())
=================
Attachments | ||
---|---|---|
Add attachment proposed patch, testcase, etc. |
Justin Garcia
fixed