RESOLVED FIXED 35836
Crash when backspacing floats with whitespace: pre-wrap. 
https://bugs.webkit.org/show_bug.cgi?id=35836
Summary Crash when backspacing floats with whitespace: pre-wrap.
Steven Wittens
Reported 2010-03-06 17:55:27 PST
Given a contentEditable div, containing two floats. The first float is normal and contains text. The second float is set to white-space: pre-wrap and contains only white space. Steps to reproducte: 1) Load attached HTML file 2) Place the caret inside the first float at the end of its (text) contents. 3) Press backspace to delete the text Expected result: The first float is emptied or deleted. Actual result: Crash. Other notes: This bug was discovered while trying to implement an advanced tokenized input field. The odd empty pre-wrap div was placed in an attempt to create more possible caret positions. The test case does not crash if: a) The second float is set to white-space: default. OR b) The second float contains text instead of white space. OR c) The second float is empty.
Attachments
Minimal testcase (661 bytes, text/html)
2010-03-06 17:56 PST, Steven Wittens 		no flags
Details
Crash backtrace (37.07 KB, text/plain)
2010-03-08 16:17 PST, Daniel Bates 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Steven Wittens
Comment 1 2010-03-06 17:56:11 PST
Created attachment 50160 [details] Minimal testcase
Daniel Bates
Comment 2 2010-03-08 16:15:40 PST
Confirmed using Mac WebKit nightly r55610. Thanks Steven for reporting this and creating a test case!
Daniel Bates
Comment 3 2010-03-08 16:17:25 PST
Created attachment 50264 [details] Crash backtrace Crash backtrace.
Wyatt Carss
Comment 4 2011-08-17 14:48:47 PDT
This bug does not reproduce for me on TOT under Linux or Mac.
Note You need to log in before you can comment on or make changes to this bug.