[Webkit-unassigned] [Bug 50218] chrome.dll!WebCore::canHaveChildrenForEditing ReadAV at NULL (4c335fdc0441ae912c5dd65199668a34)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=50218





--- Comment #2 from Ryosuke Niwa <rniwa at webkit.org>  2010-12-04 16:50:21 PST ---
Created an attachment (id=75620)
 --> (https://bugs.webkit.org/attachment.cgi?id=75620&action=review)
somewhat simpler repro

I don't know how to fix this crash.  Right now, we're not allowing the first position inside body to be a candidate even if it didn't have any other candidate in the editable region at all.  One way to fix this problem is to move the special case for unsplittable element in formatSelection to doApply.  But this would only fix IndentOutdentCommand and FormatBlockCommand.  I'm sure a similar problem exists for other editing commands as well.  However, allowing the said position to be a candidate breaks so may assumptions we make in editing and causes hundreds of tests to fail / crash.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.