RESOLVED DUPLICATE of bug 8952 9425
REGRESSION: Select some static text, delete containg div, crash in RenderView::setSelection 
https://bugs.webkit.org/show_bug.cgi?id=9425
Summary REGRESSION: Select some static text, delete containg div, crash in RenderView...
David Phillip Oster
Reported 2006-06-13 12:01:40 PDT
Regression: Select some static text, delete containg div, crash This bug shows up in Google Calendar with webKit. It does not show up in shipping safari. To reproduce: Open the enclosed sample file in webKit. Select some text in the fake "alert box" that comes up. Press the OK button on the "alert box". webKit dies in dispose inside the javascript line: dialog.innerHTML = ''; Guess of diagnosis: some kind of double delete.
Attachments
short HTML that demonstrates the crash (6.23 KB, text/html)
2006-06-13 12:03 PDT, David Phillip Oster 		no flags
Details
CrashReporter Crash report for this bug (24.17 KB, text/plain)
2006-06-13 12:05 PDT, David Phillip Oster 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
David Phillip Oster
Comment 1 2006-06-13 12:03:10 PDT
Created attachment 8838 [details] short HTML that demonstrates the crash
David Phillip Oster
Comment 2 2006-06-13 12:05:02 PDT
Created attachment 8839 [details] CrashReporter Crash report for this bug
David Phillip Oster
Comment 3 2006-06-13 12:08:07 PDT
Google bug ID 513279
Alexey Proskuryakov
Comment 4 2006-06-13 12:14:45 PDT
Setting priority/severity to P1/major (a regression that affects a major site); and I think that we put selection-related bugs into the Text component.
David Phillip Oster
Comment 5 2006-06-13 12:15:25 PDT
also Google bug ID 513380
mitz
Comment 6 2006-06-13 12:57:30 PDT
*** This bug has been marked as a duplicate of 8952 ***
Note You need to log in before you can comment on or make changes to this bug.