[Webkit-unassigned] [Bug 17268] ASSERTION FAILED: i < m_length performing undo in textbox

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=17268


webkit at mattlilek.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |webkit at mattlilek.com
             Status|UNCONFIRMED                 |NEW
          Component|New Bugs                    |WebCore Misc.
     Ever Confirmed|0                           |1
           Keywords|                            |Regression
           Priority|P2                          |P1
            Summary|Undo in textbox crashes     |ASSERTION FAILED: i <
                   |WebKit                      |m_length performing undo in
                   |                            |textbox




------- Comment #2 from webkit at mattlilek.com  2008-02-09 22:08 PDT -------
Confirmed with r30117

ASSERTION FAILED: i < m_length
(/Users/matt/Code/WebKit/WebCore/platform/text/StringImpl.h:95 UChar
WebCore::StringImpl::operator[](unsigned int))

Thread 0 Crashed:
0   com.apple.WebCore                   0x01b61601
WebCore::StringImpl::operator[](unsigned int) + 71 (StringImpl.h:95)
1   com.apple.WebCore                   0x01d8e3fc
WebCore::InlineTextBox::isLineBreak() const + 132 (InlineTextBox.cpp:217)
2   com.apple.WebCore                   0x01d8fd44
WebCore::InlineTextBox::containsCaretOffset(int) const + 100
(InlineTextBox.cpp:836)
3   com.apple.WebCore                   0x01ed1f7c
WebCore::Position::inRenderedText() const + 250 (Position.cpp:498)
4   com.apple.WebCore                   0x01ed2111
WebCore::Position::isCandidate() const + 245 (Position.cpp:469)
5   com.apple.WebCore                   0x02087bdb
WebCore::SelectionController::nodeWillBeRemoved(WebCore::Node*) + 147
(SelectionController.cpp:176)
6   com.apple.WebCore                   0x01c5dde8
WebCore::Document::notifyBeforeNodeRemoval(WebCore::Node*) + 54
(Document.cpp:2412)
7   com.apple.WebCore                   0x01bd316c
WebCore::dispatchChildRemovalEvents(WebCore::Node*, int&) + 96
(ContainerNode.cpp:951)
8   com.apple.WebCore                   0x01bd352d
WebCore::willRemoveChild(WebCore::Node*) + 27 (ContainerNode.cpp:344)
9   com.apple.WebCore                   0x01bd392c
WebCore::ContainerNode::removeChild(WebCore::Node*, int&) + 590
(ContainerNode.cpp:383)
10  com.apple.WebCore                   0x01d9503d
WebCore::InsertNodeBeforeCommand::doUnapply() + 317
(InsertNodeBeforeCommand.cpp:62)
11  com.apple.WebCore                   0x01c7f8f1
WebCore::EditCommand::unapply() + 265 (EditCommand.cpp:128)
12  com.apple.WebCore                   0x01bcc38d
WebCore::CompositeEditCommand::doUnapply() + 69 (CompositeEditCommand.cpp:80)
13  com.apple.WebCore                   0x01c7f8f1
WebCore::EditCommand::unapply() + 265 (EditCommand.cpp:128)
14  com.apple.WebCore                   0x01bcc38d
WebCore::CompositeEditCommand::doUnapply() + 69 (CompositeEditCommand.cpp:80)
15  com.apple.WebCore                   0x01c7f8f1
WebCore::EditCommand::unapply() + 265 (EditCommand.cpp:128)
16  com.apple.WebKit                    0x001a44a2 -[WebEditorUndoTarget
undoEditing:] + 166 (WebEditorClient.mm:147)
17  com.apple.Foundation                0x90b7f6c2 -[_NSUndoLightInvocation
invoke] + 34
18  com.apple.Foundation                0x90b6d204 -[_NSUndoStack popAndInvoke]
+ 244
19  com.apple.Foundation                0x90b6d007 -[NSUndoManager
undoNestedGroup] + 199
20  com.apple.AppKit                    0x9294ff94 -[NSApplication
sendAction:to:from:] + 112
21  com.apple.Safari                    0x000369b8 0x1000 + 219576
22  com.apple.AppKit                    0x929fe868 -[NSMenu
performActionForItemAtIndex:] + 493
23  com.apple.AppKit                    0x929fe56d -[NSCarbonMenuImpl
performActionWithHighlightingForItemAtIndex:] + 220
24  com.apple.AppKit                    0x929fe1f2 -[NSMenu
performKeyEquivalent:] + 866
25  com.apple.AppKit                    0x929fca99 -[NSApplication
_handleKeyEquivalent:] + 492
26  com.apple.AppKit                    0x92919e4e -[NSApplication sendEvent:]
+ 3824
27  com.apple.Safari                    0x000324a8 0x1000 + 201896
28  com.apple.AppKit                    0x92877705 -[NSApplication run] + 847
29  com.apple.AppKit                    0x928449ba NSApplicationMain + 574
30  com.apple.Safari                    0x00002876 0x1000 + 6262


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.