Bug 48646 - REGRESSION: Assertion failure in TextCheckingHelper::TextCheckingHelper(), followed by crash
Summary: REGRESSION: Assertion failure in TextCheckingHelper::TextCheckingHelper(), fo...
Status: RESOLVED DUPLICATE of bug 48708
Alias: None
Product: WebKit
Classification: Unclassified
Component: HTML Editing (show other bugs)
Version: 528+ (Nightly build)
Hardware: All All
: P1 Normal
Assignee: Nobody
URL:
Keywords: Regression
Depends on:
Blocks:
 
Reported: 2010-10-29 10:36 PDT by mitz
Modified: 2010-10-29 20:15 PDT (History)
2 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description mitz 2010-10-29 10:36:21 PDT 
The ASSERT_ARG(m_range, m_range) in the TextCheckingHelper constructor is failing with this backtrace:


#0	0x103da002e in WebCore::TextCheckingHelper::TextCheckingHelper at TextCheckingHelper.cpp:42
#1	0x103d9ff1d in WebCore::TextCheckingHelper::TextCheckingHelper at TextCheckingHelper.cpp:40
#2	0x1031935f9 in WebCore::Editor::markAllMisspellingsAndBadGrammarInRanges at Editor.cpp:2190
#3	0x10318e5d4 in WebCore::Editor::correctionPanelTimerFired at Editor.cpp:2424
#4	0x10319d40c in WebCore::Timer<WebCore::Editor>::fired at Timer.h:98
#5	0x103dcd783 in WebCore::ThreadTimers::sharedTimerFiredInternal at ThreadTimers.cpp:112
#6	0x103dcd539 in WebCore::ThreadTimers::sharedTimerFired at ThreadTimers.cpp:90
#7	0x103c35959 in WebCore::timerFired at SharedTimerMac.mm:166

The grammarRange parameter to markAllMisspellingsAndBadGrammarInRanges() is allowed to be 0, but now this method tries to use it to construct a TextCheckingHelper without checking.
Comment 1 mitz 2010-10-29 10:37:57 PDT 
In release builds, this leads to a crash.
Comment 2 mitz 2010-10-29 20:15:28 PDT 

*** This bug has been marked as a duplicate of bug 48708 ***