Bug 153104 - imported/blink/editing/text-iterator/read-past-cloned-first-letter.html crashes
Summary: imported/blink/editing/text-iterator/read-past-cloned-first-letter.html crashes
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: HTML Editing (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-01-14 13:18 PST by Beth Dakin
Modified: 2016-01-14 13:32 PST (History)
4 users (show)

See Also:

Attachments
Patch (1.75 KB, patch)
2016-01-14 13:22 PST, Beth Dakin 		simon.fraser: review+
Details | Formatted Diff | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Beth Dakin 2016-01-14 13:18:20 PST 
It is possible to make imported/blink/editing/text-iterator/read-past-cloned-first-letter.html crash by invoked wordRangeFromPosition() on the final document.
Comment 1 Beth Dakin 2016-01-14 13:22:26 PST 
Created attachment 268995 [details]
Patch
Comment 2 Beth Dakin 2016-01-14 13:32:39 PST 
Thanks Simon! http://trac.webkit.org/changeset/195072

I am investigating if there is a way to add a new test that would have crashed before this change.