[Webkit-unassigned] [Bug 16322] New: Crash when selecting text embedded through foreignObject

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=16322

           Summary: Crash when selecting text embedded through foreignObject
           Product: WebKit
           Version: 525+ (Nightly build)
          Platform: Macintosh
               URL: http://croczilla.com/svg/samples/foreign1/foreign1.xml
        OS/Version: All
            Status: NEW
          Keywords: InRadar
          Severity: Critical
          Priority: P1
         Component: SVG
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: oliver at apple.com
                CC: eric at webkit.org, bdakin at apple.com, zimmermann at kde.org


If you run the linked test in a debug build we assert when you select text, in
a release build we crash.

The problem is that the SVG text selection machinery runs even when in a
foreignObject, when all events should be handed off to foreignObject the moment
the reach it :-/

Given one of the main reasons for foreignObject is to allow flowing html text,
etc this is critical to its support.

We should also check the behaviour of mixed content xhtml/xml to ensure
correctness.

<rdar://5628970>


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.