[Webkit-unassigned] [Bug 26506] New: ASSERTION FAILED: stack.size() == depthCrossingShadowBoundaries(node)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=26506

           Summary: ASSERTION FAILED: stack.size() ==
                    depthCrossingShadowBoundaries(node)
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Windows 7
            Status: NEW
          Keywords: NeedsReduction, PlatformOnly
          Severity: Normal
          Priority: P2
         Component: Text
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: webkit at mattlilek.com


When pasting text into the toolbar search field on Windows, you hit the ASSERT
below (r44794). Doesn't seem to do anything bad in a release build (r44757
nightly).

ASSERTION FAILED: stack.size() == depthCrossingShadowBoundaries(node)
(..\editing\TextIterator.cpp:187 WebCore::pushFullyClippedState)
<http://trac.webkit.org/browser/trunk/WebCore/editing/TextIterator.cpp#L187>

>	WebKit.dll!WebCore::pushFullyClippedState(WebCore::BitStack & stack={...}, WebCore::Node * node=0x08e36630)  Line 187 + 0x36 bytes	C++
        WebKit.dll!WebCore::TextIterator::handleReplacedElement()  Line 532 +
0x12 bytes        C++
        WebKit.dll!WebCore::TextIterator::advance()  Line 339 + 0x8 bytes      
C++
        WebKit.dll!WebCore::CharacterIterator::advance(int count=0)  Line 1155
+ 0xb bytes      C++
        WebKit.dll!WebCore::findPlainText(WebCore::CharacterIterator &
it={...}, const WebCore::String & target={...}, bool forward=true, bool
caseSensitive=false, unsigned int & matchStart=0)  Line 1837     C++
        WebKit.dll!WebCore::findPlainText(const WebCore::Range *
range=0x08e32db0, const WebCore::String & target={...}, bool forward=true, bool
caseSensitive=false)  Line 1870 + 0x1c bytes   C++
        WebKit.dll!WebCore::Frame::markAllMatchesForText(const WebCore::String
& target={...}, bool caseFlag=false, unsigned int limit=101)  Line 1470 + 0x1c
bytes     C++
        WebKit.dll!WebCore::Page::markAllMatchesForText(const WebCore::String &
target={...}, WebCore::TextCaseSensitivity caseSensitivity=TextCaseInsensitive,
bool shouldHighlight=false, unsigned int limit=101)  Line 347 + 0x30 bytes     
C++
        WebKit.dll!WebView::markAllMatchesForText(wchar_t * str=0x0b4a1fec, int
caseSensitive=0, int highlight=0, unsigned int limit=101, unsigned int *
matches=0x009ff430)  Line 2918 + 0x42 bytes    C++
        Safari.exe!00483623()   
        [Frames below may be incorrect and/or missing, no symbols loaded for
Safari.exe]        
        Safari.exe!00483658()   
        Safari.exe!00475144()   
        Safari.exe!00475ea8()   
        JavaScriptCore.dll!WTF::fastMalloc(unsigned int n=4676885)  Line 225 +
0xc bytes        C++
        JavaScriptCore.dll!WTF::fastMalloc(unsigned int n=16)  Line 231 + 0xb
bytes     C++
        08867840()      
        CoreFoundation.dll!6c91054e()


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.