[Webkit-unassigned] [Bug 25751] New: Gmail popups cause an assertion failure

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=25751

           Summary: Gmail popups cause an assertion failure
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: P1
         Component: Layout and Rendering
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: brettw at chromium.org


I reproed this in my own debug build of WebKit on Mac inside Safari. I
originally noticed this in Chromium about a week ago.

Go to Gmail in a debug build. Click on "Move To" or "Labels." You will get an
assertion failure. "More actions" doesn't have the problem, presumably because
it's more simple (the other two have a scrolling element and an input).

Stack:

WebCore::RenderTextControl::setSelectionRange(int start=0, int end=0)  Line 251

WebCore::RenderTextControl::select()  Line 230

WebCore::HTMLInputElement::select()  Line 507

WebCore::InputElement::updateFocusAppearance(WebCore::InputElementData &
data={...}, WebCore::Document * document=0x04105000, bool
restorePreviousSelection=true)  Line 103

WebCore::HTMLInputElement::updateFocusAppearance(bool
restorePreviousSelection=true)  Line 165

WebCore::Element::focus(bool restorePreviousSelection=true)  Line 1188

WebCore::ElementInternal::focusCallback(const v8::Arguments & args={...})  Line
353


If I step past this assertion, I get a null pointer dereference and it crashes.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.