[Webkit-unassigned] [Bug 25895] New: [Gtk] Segfault when deleting the last/only character in an entry if a11y is enabled

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=25895

           Summary: [Gtk] Segfault when deleting the last/only character in
                    an entry if a11y is enabled
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: Accessibility
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: joanmarie.diggs at gmail.com
                CC: xan.lopez at gmail.com, William.Walker at sun.com,
                    apinheiro at igalia.com


Steps to reproduce:

1. Launch GtkLauncher

2. In the Google search entry, type a character and then press Backspace.

Expected results: GtkLauncher would not segfault.

Actual results: GtkLauncher segfaults with this error:

~~~~
ASSERTION FAILED: anchorType() == PositionIsOffsetInAnchor
(./WebCore/dom/Position.h:85 int WebCore::Position::offsetInContainerNode()
const)
~~~~

This only seems to occur when a11y is enabled.

I'm using rev. 43932 from svn trunk.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.