ASSERTION FAILED: selection()->isCaret() (WebCore/page/Frame.cpp:697 void WebCore::Frame::caretBlinkTimerFired(WebCore::Timer<WebCore::Frame>*)) <http://trac.webkit.org/changeset/52494> delayed stopping the caret blink timer, and it looks like in this case it fires after the selection becomes a non-caret but before selectionLayoutChanged() is called to stop the timer. <rdar://problem/7496082>
Rolled out r52494 with r52535. I'll re-open the original bug.
Do you have steps to reproduce? I fixed this, but want to test.
(In reply to comment #2) > Do you have steps to reproduce? I fixed this, but want to test. I do not.
(In reply to comment #2) > Do you have steps to reproduce? I fixed this, but want to test. I have no repro steps either. I encountered while running layout test in chromium on osx with the patch.