Steps to reproduce: 1. Open a page with a text area (like this bug). 2. Type text in the text area until it starts to scroll down. One visible character per line is sufficient. Make sure to add ~5 line after it starts scrolling. 3. Take the mouse cursor and click to the right of any line of text. Be sure to click more than one character's width to the right of the text. Expected results: The cursor should be placed at the end of the line where the mouse was clicked. Actual results: The cursor is placed at the end of the line a few lines above where the click took place. (It may be related to the number of lines scrolled down, or the number of lines "overflowing" the original height of the text area.) Notes: Reproduced on locally-built r15456 WebKit with Safari 2.0.4 (419.3) on Mac OS X 10.4.7 (8J135/PowerPC).
A (possibly) related behavior of this bug is click-dragging a selection downward past the bottom of the overflow area with the mouse pointer over an area of the text area that doesn't have any text. In that case, the selection jumps to the end (as in the original description of Bug 7774).
<rdar://problem/4643238>
r15569