[Webkit-unassigned] [Bug 26044] Crash at Node::nodeIndex()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=26044





------- Comment #15 from eric at webkit.org  2009-06-03 15:23 PDT -------
Ok, I'm still not sure that this crash is caused by a deleted Range ending up
left in the Document.  The two places in the code where RangeEndPoint::set()
could be called with a null node, seem to be guarded:
void Range::textNodesMerged(NodeWithIndex& oldNode, unsigned offset) -- checks
node()->previousSibling()
void Range::textNodeSplit(Text* oldNode) -- checks oldNode->nextSibling()

Then again, these crashes are in a release build.  This would of course be a
no-brainer to fix if we had a reproducible case...


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.