[Webkit-unassigned] [Bug 17125] Acid3 requires Text.replaceWholeText method from DOM Level 3

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=17125





------- Comment #6 from eric at webkit.org  2008-02-07 23:10 PDT -------
+        Node* onePastEndText = endText->nextSibling();
+        for (Node* n = nextSibling(); n != onePastEndText;) {

Same thing here. Both onePastEndText and n need to be RefPtr.

If we're protecting ourselves from insane mutation event handlers... couldn't a
mutation event handler end up removing onePastEndText from the sibling list? 
Thus if onePastEndText != 0, we'd crash, no?


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.