Bug 123729 - ASSERTION FAILED: startBlock != currentRoot in WebCore::ReplaceSelectionCommand::doApply
Summary: ASSERTION FAILED: startBlock != currentRoot in WebCore::ReplaceSelectionComma...
Status: NEW
Alias: None
Product: WebKit
Classification: Unclassified
Component: HTML Editing (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords: InRadar
Depends on:
Blocks: 116980
  Show dependency treegraph
 
Reported: 2013-11-04 02:18 PST by Renata Hodovan
Modified: 2016-08-03 13:15 PDT (History)
7 users (show)

See Also:


Attachments
Test case (250 bytes, text/html)
2013-11-04 02:18 PST, Renata Hodovan
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Renata Hodovan 2013-11-04 02:18:31 PST
Created attachment 215901 [details]
Test case

The failing test:

<hr>
<canvas>
<body onload="
	document.designMode=&apos;on&apos;;     
	document.execCommand(&apos;selectall&apos;);     
	document.execCommand(&apos;RemoveFormat&apos;);     
	document.execCommand(&apos;inserthtml&apos;, false);">	
</body>
</canvas>

The backtrace:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fffa6be0700 (LWP 17716)]
0x00007ffff4af0ac1 in WTFCrash () at /home/reni/Data/REPOS/webkitnix/Source/WTF/wtf/Assertions.cpp:342
342	    *(int *)(uintptr_t)0xbbadbeef = 0;
(gdb) bt
#0  0x00007ffff4af0ac1 in WTFCrash () at /home/reni/Data/REPOS/webkitnix/Source/WTF/wtf/Assertions.cpp:342
#1  0x00007ffff3372bee in WebCore::ReplaceSelectionCommand::doApply (this=0x63e920)
    at /home/reni/Data/REPOS/webkitnix/Source/WebCore/editing/ReplaceSelectionCommand.cpp:1009
#2  0x00007ffff330f8fc in WebCore::CompositeEditCommand::apply (this=0x63e920)
    at /home/reni/Data/REPOS/webkitnix/Source/WebCore/editing/CompositeEditCommand.cpp:211
#3  0x00007ffff330f6fc in WebCore::applyCommand (command=<incomplete type>)
    at /home/reni/Data/REPOS/webkitnix/Source/WebCore/editing/CompositeEditCommand.cpp:170
#4  0x00007ffff33446c3 in WebCore::executeInsertFragment (frame=..., fragment=<incomplete type>)
    at /home/reni/Data/REPOS/webkitnix/Source/WebCore/editing/EditorCommand.cpp:195
#5  0x00007ffff3345da6 in WebCore::executeInsertHTML (frame=..., value=...) at /home/reni/Data/REPOS/webkitnix/Source/WebCore/editing/EditorCommand.cpp:500
#6  0x00007ffff33491af in WebCore::Editor::Command::execute (this=0x7fffffffcef0, parameter=..., triggeringEvent=0x0)
    at /home/reni/Data/REPOS/webkitnix/Source/WebCore/editing/EditorCommand.cpp:1713
#7  0x00007ffff32106ac in WebCore::Document::execCommand (this=0x81b610, commandName=..., userInterface=false, value=...)
    at /home/reni/Data/REPOS/webkitnix/Source/WebCore/dom/Document.cpp:4110
#8  0x00007ffff3fab309 in WebCore::jsDocumentPrototypeFunctionExecCommand (exec=0x7fffa37fef48)
    at /home/reni/Data/REPOS/webkitnix/WebKitBuild/Debug/DerivedSources/WebCore/JSDocument.cpp:2705
#9  0x00007fffaa282105 in ?? ()
#10 0x00007fffffffd030 in ?? ()
#11 0x00007ffff4875638 in llint_op_call () from /home/reni/Data/REPOS/webkitnix/WebKitBuild/Debug/lib/libWebKitNix.so.0
#12 0x00007fffaa282940 in ?? ()
#13 0x0000000000689dd8 in ?? ()
#14 0x0000000000611920 in ?? ()
#15 0x00007ffff081b9a0 in thread_context_stack () from /home/reni/Data/REPOS/webkitnix/WebKitBuild/Dependencies/Root/lib64/libglib-2.0.so.0
#16 0x00000000008cc9c0 in ?? ()
#17 0x00007ffff365f4ae in WebCore::ResourceLoader::didReceiveBuffer (this=0x7fffffffd030, buffer=<incomplete type>, encodedDataLength=0)
    at /home/reni/Data/REPOS/webkitnix/Source/WebCore/loader/ResourceLoader.cpp:483
#18 0x00007fffffffd080 in ?? ()
#19 0x00007ffff45f340e in JSC::JITCode::execute (this=0x48ff865601e8c789, stack=0x48e0458d48d4ff41, callFrame=0xc78948da89480000, vm=0x1b9c8458b48e0)
    at /home/reni/Data/REPOS/webkitnix/Source/JavaScriptCore/jit/JITCode.cpp:46
Backtrace stopped: previous frame inner to this frame (corrupt stack?)
Comment 1 Brent Fulgham 2016-08-03 13:14:45 PDT
This still occurs under r204037.
Comment 2 Radar WebKit Bug Importer 2016-08-03 13:15:33 PDT
<rdar://problem/27684279>