Created attachment 158511 [details] Repro When the element width is so small and the text in such element was rendered one character by one character, clicking somewhere right on that element will trigger an assertion.
Please resize your browser so that "something" is rendered like s o m e t h i n g
ASSERTION FAILED: inSameLine(temp, prev) /Volumes/Data/Safari/OpenSource/Source/WebCore/editing/VisiblePosition.cpp(97) : WebCore::VisiblePosition WebCore::VisiblePosition::previous(WebCore::EditingBoundaryCrossingRule) const 1 0x10a4e0d9c WebCore::VisiblePosition::previous(WebCore::EditingBoundaryCrossingRule) const 2 0x10a4e0001 WebCore::VisiblePosition::characterBefore() const 3 0x10a4da08a WebCore::previousBoundary(WebCore::VisiblePosition const&, unsigned int (*)(unsigned short const*, unsigned int, unsigned int, WebCore::BoundarySearchContextAvailability, bool&)) 4 0x10a4d9eba WebCore::startOfWord(WebCore::VisiblePosition const&, WebCore::EWordSide) 5 0x1092b9d17 WebCore::Editor::respondToChangedSelection(WebCore::VisibleSelection const&, unsigned int)
Created attachment 237687 [details] Repro2 The previous test case doesn't trigger the assertion fail (for me) anymore. However, the second one fails on the same point.