This is a regression due to http://trac.webkit.org/changeset/65208. editing/pasteboard/smart-paste-003.html and smart-paste-004.html crash on Windows Chromium.
http://crbug.com/52014.
Created attachment 64518 [details] fixes the crash
Why does this only crash on Chromium Win? Is it possible to write a layout test that crashes on WebKit mac that we can add?
(In reply to comment #3) > Why does this only crash on Chromium Win? Is it possible to write a layout test that crashes on WebKit mac that we can add? I tried many obscure cases to reproduce the issue but only reproduces in Chromium Windows. I'm not sure if it only crashes on Chromium Windows. It's quite possible that it also crashes on WebKit Win. I suspect that our implementation of selection is slightly different on Windows, and somehow obtaining a different selection.
(In reply to comment #4) > I tried many obscure cases to reproduce the issue but only reproduces in Chromium Windows. I'm not sure if it only crashes on Chromium Windows. It's quite possible that it also crashes on WebKit Win. I suspect that our implementation of selection is slightly different on Windows, and somehow obtaining a different selection. Since these are testing smart-paste, it probably has to do with inserting extra spaces. Maybe layoutTestController.setSmartInsertDeleteEnabled() can help repro this on a mac?
Created attachment 64529 [details] added a test that works on Mac
Committed r65467: <http://trac.webkit.org/changeset/65467>