[Webkit-unassigned] [Bug 20161] Dragging image into Google Presentation crashes Safari

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=20161


eric at webkit.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |justin.garcia at apple.com




------- Comment #1 from eric at webkit.org  2008-07-24 10:51 PDT -------
This happens in Debug mode as well, but no ASSERT is ever hit.

Somehow ReplaceSelectionCommand::m_firstNodeInserted ends up as a disconnected
node (i.e. a node with no parent pointer), calling nextPosition on such a node
will crash.  Perhaps Justin can help me understand what's going on here.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.