[Webkit-unassigned] [Bug 28697] WebKit crash on WebCore::Node::nodeIndex()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=28697





--- Comment #17 from Eric Seidel <eric at webkit.org>  2009-11-25 20:29:59 PST ---
    document->nodeWillBeRemoved(child);
is just not designed to be called repeatedly like this.  NodeIterator looks
like it could have the same problem depending on if NodePointer
isPointerBeforeNode or not.

One solution would be to move the     document->nodeWillBeRemoved(child); call
out of dispatchChildRemovalEvents and put it next to where the node will
actually be removed.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.