[Webkit-unassigned] [Bug 31684] New: WebCore::Range::surroundContents NULL pointer

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Nov 19 13:54:17 PST 2009


https://bugs.webkit.org/show_bug.cgi?id=31684

           Summary: WebCore::Range::surroundContents NULL pointer
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Windows Vista
            Status: NEW
          Severity: Normal
          Priority: P1
         Component: HTML DOM
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: skylined at chromium.org
                CC: eric at webkit.org


Created an attachment (id=43520)
 --> (https://bugs.webkit.org/attachment.cgi?id=43520)
Repro

The following HTML triggers a NULL pointer in
"WebCore::Range::surroundContents":

<SCRIPT>
  range=document.createRange();
  text=document.createTextNode('');
  range.selectNodeContents(text);
  element=document.createElement("l");
  range.surroundContents(element);
</SCRIPT>

Relevant call stack (in Chromium):
WebCore::Range::surroundContents(class WTF::PassRefPtr<WebCore::Node>
passNewParent = class WTF::PassRefPtr<WebCore::Node>, int * ec =
0x0012f220)+0x113
WebCore::RangeInternal::surroundContentsCallback(class v8::Arguments * args =
0x00000000)+0xac

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list