[Webkit-unassigned] [Bug 8145] Pasting text from TextEdit with a bold word into text field results in crash

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=8145


darin at apple.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |darin at apple.com
          Component|HTML Forms                  |HTML Editing




------- Comment #2 from darin at apple.com  2006-04-02 17:17 PDT -------
Crash happens because a node is nil. This happens because of this code in
ReplaceSelectionCommand::doApply:

702             } else if (m_lastNodeInserted &&
!m_fragment.isBlockFlow(refNode)) {
703                 Position pos =
visiblePos.next().deepEquivalent().downstream();
704                 insertNodeAtAndUpdateNodesInserted(refNode, pos.node(),
pos.offset());

visiblePos.next() is null.


-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.