[Webkit-unassigned] [Bug 15942] REGRESSION: Selecting "Edit Html" tab in Blogger causes crash (Assertion failed: isRange())

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sun Nov 11 09:23:02 PST 2007


http://bugs.webkit.org/show_bug.cgi?id=15942


webkit at mattlilek.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
          Component|Forms                       |HTML Editing
     Ever Confirmed|0                           |1
           Keywords|                            |NeedsReduction, Regression
           Priority|P2                          |P1
            Summary|Selecting "Edit Html" tab in|REGRESSION: Selecting "Edit
                   |Blogger causes crash        |Html" tab in Blogger causes
                   |                            |crash (Assertion failed:
                   |                            |isRange())




------- Comment #6 from webkit at mattlilek.com  2007-11-11 09:23 PDT -------
Confirmed with r27668.  When I go into blogger and edit a post, clicking the
"Edit HTML" tab hits the assertion failure below. Bumping to P1 since it
crashes in release builds and is a regression from Safari 3.0.4 on Leopard.

ASSERTION FAILED: isRange()
(/WebKit/WebCore/editing/Selection.cpp:151 WTF::PassRefPtr<WebCore::Range>
WebCore::Selection::toRange() const)

Thread 0 Crashed:
0   com.apple.WebCore                   0x023261bb
WebCore::Selection::toRange() const + 297 (Selection.cpp:151)
1   com.apple.WebCore                   0x01e6fe5d
WebCore::enclosingDeletableElement(WebCore::Selection const&) + 61
(DeleteButtonController.cpp:104)
2   com.apple.WebCore                   0x01e7111b
WebCore::DeleteButtonController::enable() + 145
(DeleteButtonController.cpp:284)
3   com.apple.WebCore                   0x023d3a24
WebCore::createMarkup(WebCore::Node const*, WebCore::EChildrenOnly,
WTF::Vector<WebCore::Node*, 0ul>*) + 252 (markup.cpp:922)
4   com.apple.WebCore                   0x01f2e2b1
WebCore::HTMLElement::innerHTML() const + 43 (HTMLElement.cpp:223)
5   com.apple.WebCore                   0x0202263c
WebCore::JSHTMLElement::getValueProperty(KJS::ExecState*, int) const + 672
(JSHTMLElement.cpp:183)
6   com.apple.WebCore                   0x02023032 KJS::JSValue*
KJS::staticValueGetter<WebCore::JSHTMLElement>(KJS::ExecState*, KJS::JSObject*,
KJS::Identifier const&, KJS::PropertySlot const&) + 62 (lookup.h:152)
7   com.apple.JavaScriptCore            0x00459a52
KJS::PropertySlot::getValue(KJS::ExecState*, KJS::JSObject*, KJS::Identifier
const&) const + 132 (property_slot.h:49)
8   com.apple.JavaScriptCore            0x0040c7fc
KJS::JSObject::get(KJS::ExecState*, KJS::Identifier const&) const + 74
(object.cpp:163)
9   com.apple.JavaScriptCore            0x0043c2c1
KJS::DotAccessorNode::evaluate(KJS::ExecState*) + 127 (nodes.cpp:683)
10  com.apple.JavaScriptCore            0x00439248
KJS::AssignDotNode::evaluate(KJS::ExecState*) + 136 (nodes.cpp:2706)
11  com.apple.JavaScriptCore            0x00438723
KJS::ExprStatementNode::execute(KJS::ExecState*) + 133 (nodes.cpp:3101)
12  com.apple.JavaScriptCore            0x004194c6
KJS::statementListExecute(WTF::Vector<WTF::RefPtr<KJS::StatementNode>, 0ul>&,
KJS::ExecState*) + 108 (nodes.cpp:3036)
13  com.apple.JavaScriptCore            0x0041961e
KJS::BlockNode::execute(KJS::ExecState*) + 92 (nodes.cpp:3077)
14  com.apple.JavaScriptCore            0x004358ab
KJS::FunctionBodyNode::execute(KJS::ExecState*) + 47 (nodes.cpp:3969)
15  com.apple.JavaScriptCore            0x0040c72a
KJS::FunctionImp::execute(KJS::ExecState*) + 38 (function.cpp:252)
16  com.apple.JavaScriptCore            0x0043f694
KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List
const&) + 384 (function.cpp:93)
17  com.apple.JavaScriptCore            0x0042a1bc
KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 222
(object.cpp:95)
18  com.apple.JavaScriptCore            0x00449233
KJS::FunctionCallResolveNode::evaluate(KJS::ExecState*) + 661 (nodes.cpp:834)
19  com.apple.JavaScriptCore            0x00437370
KJS::ReturnNode::execute(KJS::ExecState*) + 268 (nodes.cpp:3489)
20  com.apple.JavaScriptCore            0x004194c6
KJS::statementListExecute(WTF::Vector<WTF::RefPtr<KJS::StatementNode>, 0ul>&,
KJS::ExecState*) + 108 (nodes.cpp:3036)
21  com.apple.JavaScriptCore            0x0041961e
KJS::BlockNode::execute(KJS::ExecState*) + 92 (nodes.cpp:3077)
22  com.apple.JavaScriptCore            0x004358ab
KJS::FunctionBodyNode::execute(KJS::ExecState*) + 47 (nodes.cpp:3969)
23  com.apple.JavaScriptCore            0x0040c72a
KJS::FunctionImp::execute(KJS::ExecState*) + 38 (function.cpp:252)
24  com.apple.JavaScriptCore            0x0043f694
KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List
const&) + 384 (function.cpp:93)
25  com.apple.JavaScriptCore            0x0042a1bc
KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 222
(object.cpp:95)
26  com.apple.JavaScriptCore            0x00449233
KJS::FunctionCallResolveNode::evaluate(KJS::ExecState*) + 661 (nodes.cpp:834)
27  com.apple.JavaScriptCore            0x00439248
KJS::AssignDotNode::evaluate(KJS::ExecState*) + 136 (nodes.cpp:2706)
28  com.apple.JavaScriptCore            0x00438723
KJS::ExprStatementNode::execute(KJS::ExecState*) + 133 (nodes.cpp:3101)
29  com.apple.JavaScriptCore            0x004194c6
KJS::statementListExecute(WTF::Vector<WTF::RefPtr<KJS::StatementNode>, 0ul>&,
KJS::ExecState*) + 108 (nodes.cpp:3036)
30  com.apple.JavaScriptCore            0x0041961e
KJS::BlockNode::execute(KJS::ExecState*) + 92 (nodes.cpp:3077)
31  com.apple.JavaScriptCore            0x004358ab
KJS::FunctionBodyNode::execute(KJS::ExecState*) + 47 (nodes.cpp:3969)
32  com.apple.JavaScriptCore            0x0040c72a
KJS::FunctionImp::execute(KJS::ExecState*) + 38 (function.cpp:252)
33  com.apple.JavaScriptCore            0x0043f694
KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List
const&) + 384 (function.cpp:93)
34  com.apple.JavaScriptCore            0x0042a1bc
KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 222
(object.cpp:95)
35  com.apple.JavaScriptCore            0x00448296
KJS::FunctionCallDotNode::evaluate(KJS::ExecState*) + 794 (nodes.cpp:966)
36  com.apple.JavaScriptCore            0x00438723
KJS::ExprStatementNode::execute(KJS::ExecState*) + 133 (nodes.cpp:3101)
37  com.apple.JavaScriptCore            0x004194c6
KJS::statementListExecute(WTF::Vector<WTF::RefPtr<KJS::StatementNode>, 0ul>&,
KJS::ExecState*) + 108 (nodes.cpp:3036)
38  com.apple.JavaScriptCore            0x0041961e
KJS::BlockNode::execute(KJS::ExecState*) + 92 (nodes.cpp:3077)
39  com.apple.JavaScriptCore            0x004358ab
KJS::FunctionBodyNode::execute(KJS::ExecState*) + 47 (nodes.cpp:3969)
40  com.apple.JavaScriptCore            0x0040c72a
KJS::FunctionImp::execute(KJS::ExecState*) + 38 (function.cpp:252)
41  com.apple.JavaScriptCore            0x0043f694
KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List
const&) + 384 (function.cpp:93)
42  com.apple.JavaScriptCore            0x0042a1bc
KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 222
(object.cpp:95)
43  com.apple.JavaScriptCore            0x00448296
KJS::FunctionCallDotNode::evaluate(KJS::ExecState*) + 794 (nodes.cpp:966)
44  com.apple.JavaScriptCore            0x00438723
KJS::ExprStatementNode::execute(KJS::ExecState*) + 133 (nodes.cpp:3101)
45  com.apple.JavaScriptCore            0x00438610
KJS::IfNode::execute(KJS::ExecState*) + 236 (nodes.cpp:3129)
46  com.apple.JavaScriptCore            0x004194c6
KJS::statementListExecute(WTF::Vector<WTF::RefPtr<KJS::StatementNode>, 0ul>&,
KJS::ExecState*) + 108 (nodes.cpp:3036)
47  com.apple.JavaScriptCore            0x0041961e
KJS::BlockNode::execute(KJS::ExecState*) + 92 (nodes.cpp:3077)
48  com.apple.JavaScriptCore            0x004358ab
KJS::FunctionBodyNode::execute(KJS::ExecState*) + 47 (nodes.cpp:3969)
49  com.apple.JavaScriptCore            0x0040c72a
KJS::FunctionImp::execute(KJS::ExecState*) + 38 (function.cpp:252)
50  com.apple.JavaScriptCore            0x0043f694
KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List
const&) + 384 (function.cpp:93)
51  com.apple.JavaScriptCore            0x0042a1bc
KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 222
(object.cpp:95)
52  com.apple.WebCore                   0x023ba087
WebCore::JSAbstractEventListener::handleEvent(WebCore::Event*, bool) + 621
(kjs_events.cpp:115)
53  com.apple.WebCore                   0x01ec7fb9
WebCore::EventTargetNode::handleLocalEvents(WebCore::Event*, bool) + 357
(EventTargetNode.cpp:167)
54  com.apple.WebCore                   0x01ec76f1
WebCore::EventTargetNode::dispatchGenericEvent(WTF::PassRefPtr<WebCore::Event>,
int&, bool) + 1187 (EventTargetNode.cpp:225)
55  com.apple.WebCore                   0x01ec847e
WebCore::EventTargetNode::dispatchEvent(WTF::PassRefPtr<WebCore::Event>, int&,
bool, WebCore::EventTarget*) + 330 (EventTargetNode.cpp:309)
56  com.apple.WebCore                   0x01ec84fb
WebCore::EventTargetNode::dispatchEvent(WTF::PassRefPtr<WebCore::Event>, int&,
bool) + 75 (EventTargetNode.cpp:293)
57  com.apple.WebCore                   0x01ec91b7
WebCore::EventTargetNode::dispatchMouseEvent(WebCore::AtomicString const&, int,
int, int, int, int, int, bool, bool, bool, bool, bool, WebCore::Node*,
WTF::PassRefPtr<WebCore::Event>) + 699 (EventTargetNode.cpp:481)
58  com.apple.WebCore                   0x01ec990b
WebCore::EventTargetNode::dispatchMouseEvent(WebCore::PlatformMouseEvent
const&, WebCore::AtomicString const&, int, WebCore::Node*) + 497
(EventTargetNode.cpp:398)
59  com.apple.WebCore                   0x01ec01d1
WebCore::EventHandler::dispatchMouseEvent(WebCore::AtomicString const&,
WebCore::Node*, bool, int, WebCore::PlatformMouseEvent const&, bool) + 147
(EventHandler.cpp:1259)
60  com.apple.WebCore                   0x01ec0a24
WebCore::EventHandler::handleMouseReleaseEvent(WebCore::PlatformMouseEvent
const&) + 894 (EventHandler.cpp:1090)
61  com.apple.WebCore                   0x01ec51fd
WebCore::EventHandler::mouseUp(NSEvent*) + 435 (EventHandlerMac.mm:523)
62  com.apple.WebKit                    0x001ca8e8 -[WebHTMLView mouseUp:] +
274 (WebHTMLView.mm:3224)
63  com.apple.AppKit                    0x94538e39 -[NSWindow sendEvent:] +
5520
64  com.apple.Safari                    0x000329d3 0x1000 + 203219
65  com.apple.AppKit                    0x94505a2c -[NSApplication sendEvent:]
+ 2766
66  com.apple.Safari                    0x000324a8 0x1000 + 201896
67  com.apple.AppKit                    0x94463705 -[NSApplication run] + 847
68  com.apple.AppKit                    0x944309ba NSApplicationMain + 574
69  com.apple.Safari                    0x00002876 0x1000 + 6262


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list