What steps will reproduce the problem? 1. Create a table in a Google Sites page. For example, 2x2. I think any size will do. 2. Click next to the right of the table, outside of it. 3. Click in the 'indent right' button. What is the expected result? The table is indented to the right. Chromium bug report: http://code.google.com/p/chromium/issues/detail?id=18284 This could be a regression due to http://trac.webkit.org/changeset/45316.
Created attachment 35179 [details] demo, crashes your WebKit
Created attachment 35182 [details] fixes the bug, one line change.
Comment on attachment 35182 [details] fixes the bug, one line change. Can endOfCurrentParagraph ever have 0 for a node? r=me assuming the answer is no
(In reply to comment #3) > (From update of attachment 35182 [details]) > Can endOfCurrentParagraph ever have 0 for a node? > > r=me assuming the answer is no It should never be. We could add an ASSERT there but the ending condition of the while loop is that we traverse through nodes until we reach end of selection. So should it ever be null, we fall into an infinite loop. http://trac.webkit.org/browser/trunk/WebCore/editing/IndentOutdentCommand.cpp#L207
Landed in http://trac.webkit.org/changeset/47608.