[webkit-reviews] review requested: [Bug 9358] REGRESSION: Assertion failure in HTMLInputElement::setValueFromRenderer (value == constrainValue(value)) when deleting all text : [Attachment 9089] Patch v1 (no changelog; no test)

[bugzilla-request-daemon at opendarwin.org]

David Kilzer (ddkilzer) <ddkilzer at kilzer.net> has asked  for review:
Bug 9358: REGRESSION: Assertion failure in
HTMLInputElement::setValueFromRenderer (value == constrainValue(value)) when
deleting all text
http://bugzilla.opendarwin.org/show_bug.cgi?id=9358

Attachment 9089: Patch v1 (no changelog; no test)
http://bugzilla.opendarwin.org/attachment.cgi?id=9089&action=edit

------- Additional Comments from David Kilzer (ddkilzer) <ddkilzer at kilzer.net>
I crash from this assertion daily on my debug build.  Tell me what's wrong with
this patch so it can be fixed properly.  :)