820 if (type == Position::PositionIsOffsetInAnchor) { 821 ASSERT(type != Position::PositionIsOffsetInAnchor || !offset); should be 820 if (type == Position::PositionIsOffsetInAnchor) { 821 ASSERT(type == Position::PositionIsOffsetInAnchor || !offset); instead. Thanks Justin for finding this!
Created attachment 99171 [details] Patch
Committed r90064: <http://trac.webkit.org/changeset/90064>