As mentioned in several FIXMEs in ReplaceSelectionCommand, m_firstNodeInserted and m_lastLeafInserted should be replaced by real positions.
Created attachment 109349 [details] Patch
Created attachment 109350 [details] Patch
Attachment 109349 [details] did not pass style-queue: Failed to run "['Tools/Scripts/check-webkit-style', '--diff-files', u'Source/WebCore/ChangeLog', u'Source/WebCor..." exit_code: 1 Source/WebCore/ChangeLog:20: Line contains tab character. [whitespace/tab] [5] Source/WebCore/ChangeLog:21: Line contains tab character. [whitespace/tab] [5] Total errors found: 2 in 5 files If any of these errors are false positives, please file a bug against check-webkit-style.
Comment on attachment 109350 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=109350&action=review > Source/WebCore/editing/ReplaceSelectionCommand.cpp:1001 > + // Setup m_startOfInsertedContent and m_endOfInsertedContent. This should be the last two lines of code that access insertedNodes. We can do a follow up patch that puts the entire section that uses insertedNodes in a block to enforce this.
Any reviewers?
Comment on attachment 109350 [details] Patch Looks good to me.
Comment on attachment 109350 [details] Patch Clearing flags on attachment: 109350 Committed r96553: <http://trac.webkit.org/changeset/96553>
All reviewed patches have been landed. Closing bug.