[Webkit-unassigned] [Bug 37950] REGRESSION: Crash in WebCore::TextIterator::handleTextNode() encountered in Google rich-text products

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=37950





--- Comment #3 from Alexey Proskuryakov <ap at webkit.org>  2010-04-21 19:06:43 PST ---
Asserts in debug build:

ASSERTION FAILED: i < size()
(/Users/ap/Safari/OpenSource/WebKitBuild/Debug/JavaScriptCore.framework/PrivateHeaders/Vector.h:533
T& WTF::Vector<T, inlineCapacity>::at(size_t) [with T =
WebCore::InlineTextBox*, long unsigned int inlineCapacity = 0ul])

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.