[Webkit-unassigned] [Bug 20676] Safari 4dp crashes while executing "undo" in gmail

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=20676


webkit at mattlilek.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |webkit at mattlilek.com




------- Comment #8 from webkit at mattlilek.com  2008-09-08 21:21 PDT -------
(In reply to comment #4)
> Double bah.  It's very easy to reproduce with internal Gmail.
> 1.  hit reply
> 2.  type something
> 3.  hit undo
> 4.  Safari crashes.

These steps hit the following ASSERT for me:
<http://trac.webkit.org/browser/trunk/WebCore/editing/InsertNodeBeforeCommand.cpp#L59>

ASSERTION FAILED: m_refChild->parentNode()
(/Users/matt/Code/WebKit/WebCore/editing/InsertNodeBeforeCommand.cpp:59 virtual
void WebCore::InsertNodeBeforeCommand::doUnapply())

Thread 0 Crashed:
0   com.apple.WebCore                   0x03564f49
WebCore::InsertNodeBeforeCommand::doUnapply() + 235
(InsertNodeBeforeCommand.cpp:59)
1   com.apple.WebCore                   0x0341db09
WebCore::EditCommand::unapply() + 265 (EditCommand.cpp:127)
2   com.apple.WebCore                   0x032ecd7b
WebCore::CompositeEditCommand::doUnapply() + 69 (CompositeEditCommand.cpp:80)
3   com.apple.WebCore                   0x0341db09
WebCore::EditCommand::unapply() + 265 (EditCommand.cpp:127)
4   com.apple.WebCore                   0x032ecd7b
WebCore::CompositeEditCommand::doUnapply() + 69 (CompositeEditCommand.cpp:80)
5   com.apple.WebCore                   0x0341db09
WebCore::EditCommand::unapply() + 265 (EditCommand.cpp:127)
6   com.apple.WebKit                    0x001c34c0 -[WebEditorUndoTarget
undoEditing:] + 166 (WebEditorClient.mm:150)


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.