[Webkit-unassigned] [Bug 37950] Crash in WebCore::TextIterator::handleTextNode() encountered in Google rich-text products

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=37950





--- Comment #10 from Tony Chang (Google) <tony at chromium.org>  2010-04-22 23:46:01 PST ---
(In reply to comment #8)
> I am afraid that this fix may be wrong, because it doesn’t reset m_textBox in
> this case. I would feel much better with a fix that didn’t return early here,
> but instead just changed this
> 
> m_textBox = renderer->containsReversedText() ? m_sortedTextBoxes[0] :
> renderer->firstTextBox();
> 
> to say
> 
> m_textBox = renderer->containsReversedText() ? (m_sortedTextBoxes.size() ?
> m_sortedTextBoxes[0] : 0) : renderer->firstTextBox();

Good point.  Updated.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.