[Webkit-unassigned] [Bug 13493] New: REGRESSION: Crash at WTF::fastFree() when arrowing backward through editable text

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Apr 25 15:10:41 PDT 2007


http://bugs.webkit.org/show_bug.cgi?id=13493

           Summary: REGRESSION: Crash at WTF::fastFree() when arrowing
                    backward through editable text
           Product: WebKit
           Version: 522+ (nightly)
          Platform: Macintosh
        OS/Version: Mac OS X 10.4
            Status: NEW
          Keywords: Regression, InRadar
          Severity: Normal
          Priority: P1
         Component: HTML Editing
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: justin.garcia at apple.com


Open:
<body contenteditable="true">• <b>This is some linked text</b></body>
Place the caret at the end of the document and left arrow backward through the
text.  Crash occurs when the caret is between 'm' and 'e' of 'some'.

0   com.apple.JavaScriptCore    0x001747ca WTF::fastFree(void*) + 58
1   com.apple.WebCore           0x0118b900
WebCore::DeprecatedStringData::~DeprecatedStringData [in-charge]() + 32
2   com.apple.WebCore           0x011d28dd
WebCore::previousBoundary(WebCore::VisiblePosition const&, unsigned
(*)(unsigned short const*, unsigned)) + 893
3   com.apple.WebCore           0x011d5be0
WebCore::startOfWord(WebCore::VisiblePosition const&, WebCore::EWordSide) + 256
4   com.apple.WebCore           0x010abba6
WebCore::Frame::respondToChangedSelection(WebCore::Selection const&, bool) +
310
5   com.apple.WebCore           0x011c669f
WebCore::SelectionController::setSelection(WebCore::Selection const&, bool,
bool, bool) + 895
6   com.apple.WebCore           0x011c8326
WebCore::SelectionController::moveTo(WebCore::VisiblePosition const&, bool) +
118
7   com.apple.WebCore           0x011c947d
WebCore::SelectionController::modify(WebCore::SelectionController::EAlteration,
WebCore::SelectionController::EDirection, WebCore::TextGranularity, bool) + 509

...

<rdar://problem/5157329> REGRESSION: Crash at WTF::fastFree() when arrowing
backward through editable text


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list