[Webkit-unassigned] [Bug 44815] crash: 0x101dad3ae in WebCore::RenderBox::positionForPoint at RenderBox.cpp:2817

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Aug 31 11:54:13 PDT 2010


https://bugs.webkit.org/show_bug.cgi?id=44815





--- Comment #7 from Ryosuke Niwa <rniwa at webkit.org>  2010-08-31 11:54:13 PST ---
(In reply to comment #5)
> Is it possible to have something like
> 
> inline Position firstDeepEditingPositionForNode(Node* anchorNode)
> {
>     if (anchorNode)
>         return Position(anchorNode, 0);
>     else
>         return Position();
> }

I don't think handling null anchorNode fits into the semantics of this particular function.  Furthermore, as I commented, the crash is caused by our calling node() in anonymous node.  And anonymous node isn't a detached node that can be treated as null.  It usually contains or is a descendent of some DOM node, which can be used to call firstDeepEditingPositionForNode.

> I've tried this and it runs on the example in question, but I don't know what else it might cause problems with.

I'm sure this will prevent the crash but I'm afraid that isn't the right fix here.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list