[Webkit-unassigned] [Bug 39989] Inline elements with contenteditable - applying RichText crashes browser

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=39989


Ryosuke Niwa <rniwa at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED




--- Comment #9 from Ryosuke Niwa <rniwa at webkit.org>  2010-07-24 00:52:18 PST ---
This is crash is caused when splitTextElementAtEndIfNeeded is called on a text node with non-editable parent.  As in https://bugs.webkit.org/show_bug.cgi?id=27156, we should carefully verify the pre-condition to call splitTextElementAtEndIfNeeded.  The bug does not reproduce when the entire text node is selected.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.