To reproduce: 1. Go to data:text/html,%3Cinput%20value=%22this%20is%20a%20long%20test%20value%20that%20you%20should%20overwrite%20to%20see%20painting%20bugs%22%3E 2. Click in the text field 3. Press the right arrow until the word "this" has scrolled off the left edge of the text field 4. Click just before the "v" in "value" 5. Type a few characters The word "that" starts getting clobbered by the word "value", instead of moving to the right. This happens on both Mac and Windows. It did not happen in Safari 4.0.3.
<rdar://problem/7269108>
Caused by <http://trac.webkit.org/changeset/47440>.
Created attachment 40664 [details] Reduction not involving form controls
Created attachment 40671 [details] Fix
Fixed in <http://trac.webkit.org/projects/webkit/changeset/49131>.