[Webkit-unassigned] [Bug 38232] REGRESSION: crash in WebCore::CompositeEditCommand::splitTreeToNode when indenting in an empty li

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Apr 27 22:19:43 PDT 2010


https://bugs.webkit.org/show_bug.cgi?id=38232





--- Comment #2 from Tony Chang (Google) <tony at chromium.org>  2010-04-27 22:19:42 PST ---
(In reply to comment #0)
> Likely a result of http://trac.webkit.org/changeset/53927.

Yup, that change was completely wrong.  The guy who wrote it didn't know what
he was doing.  Hopefully that guy understands this better now.

The new patch reverts r53927 and adds a comment explaining what the code is
supposed to do.  It includes a new fix to the problem.

The problem was that some nodes are block elements even though they can't
contain text or other elements (e.g., <hr>).  In this case, we would try to
split the <hr>, but that doesn't make sense.  Rather than try to split, we just
treat the individual node as a block.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list