Using a build of WebKit with assertions enabled (say, a debug build). Perform the following in a new window: 1. Visit <https://www.google.com/#q=apple+inc>. 2. Without loss of generality, place the text insertion point before the 'i' in "inc" in the search field at the top of the page. 3. Press the down arrow on the keyboard to open the suggestions panel. 4. Press the down arrow on the keyboard to select the first suggestion "apple inc". 5. Press the return key on the keyboard. Then we crash at ASSERT(isCaret()) in FrameSelection::caretBlinkTimerFired().
Created attachment 226008 [details] Test case A test case that triggers the assertion failure.
Created attachment 226009 [details] [Web Archive] https://www.google.com/#q=apple+inc For historical preservation, attached a web archive of <https://www.google.com/#q=apple+inc> as it appeared on 03/06/2014 @ 11:00 AM PST.
Created attachment 226012 [details] Stack trace