Stepping in the issue, there is an assertion failure: ASSERT(run.charactersLength() >= run.length()); The line before is run.setCharactersLength(text.textLength() - from); However, stepping into this line results in stepping into DocumentMarker::setStartOffset instead.
Started from https://bugs.webkit.org/show_bug.cgi?id=122458
and GTK and EFL too ... - http://build.webkit.org/builders/GTK%20Linux%2064-bit%20Debug%20WK1/builds/4983 - http://build.webkit.org/builders/EFL%20Linux%2064-bit%20Release%20WK1/builds/2321
Created attachment 215172 [details] disable simple line layout on non-mac platforms
Comment on attachment 215172 [details] disable simple line layout on non-mac platforms r=me :|
https://trac.webkit.org/r158007
Filed bug 123338 for re-enabling.