[Webkit-unassigned] [Bug 6160] New: REGRESSION: Crash when running editing/deleting/delete-3800834-fix.html

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=6160

           Summary: REGRESSION: Crash when running editing/deleting/delete-
                    3800834-fix.html
           Product: WebKit
           Version: 412+
          Platform: Macintosh
        OS/Version: Mac OS X 10.4
            Status: NEW
          Severity: critical
          Priority: P1
         Component: HTML Editing
        AssignedTo: webkit-unassigned at opendarwin.org
        ReportedBy: ap at nypop.com


Steps to reproduce:
1. With a development build, run 
$ run-webkit-tests editing/deleting/delete-3800834-fix.html

Results:
DumpRenderTree(4229,0xa000ed68) malloc: *** error for object 0x6a5d70: double free
DumpRenderTree(4229,0xa000ed68) malloc: *** set a breakpoint in szone_error to debug
=================
ASSERTION FAILED: exceptionCode == 0 (/Users/ap/WebKit/WebCore/khtml/editing/
append_node_command.cpp:64 virtual void khtml::AppendNodeCommand::doApply())
=================

-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.