They could end up being nullptr.
LayoutTests/editing/execCommand/crash-137961.html crashes when https://bug-138167-attachments.webkit.org/attachment.cgi?id=262749 applied. see the stacktrace here: https://bugs.webkit.org/attachment.cgi?id=262728
Created attachment 262811 [details] Patch
Comment on attachment 262811 [details] Patch Clearing flags on attachment: 262811 Committed r190835: <http://trac.webkit.org/changeset/190835>
All reviewed patches have been landed. Closing bug.