[Webkit-unassigned] [Bug 39989] Inline elements with contenteditable - applying RichText crashes browser

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=39989


Alexey Proskuryakov <ap at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Platform|PC                          |All
         OS/Version|Windows XP                  |All
             Status|UNCONFIRMED                 |NEW
           Priority|P2                          |P1
                 CC|                            |ap at webkit.org,
                   |                            |enrica at apple.com
     Ever Confirmed|0                           |1




--- Comment #3 from Alexey Proskuryakov <ap at webkit.org>  2010-06-02 11:30:31 PST ---
Confirmed with r60522.

#0    0x01bf7635 in WebCore::Node::getFlag at Node.h:651
#1    0x01ad5e41 in WebCore::Node::isContainerNode at Node.h:185
#2    0x01c97341 in WebCore::Node::lastChild at Node.h:144
#3    0x01b3b8e8 in WebCore::ApplyStyleCommand::splitTextElementAtEndIfNeeded at ApplyStyleCommand.cpp:1580
#4    0x01b41e9f in WebCore::ApplyStyleCommand::applyInlineStyle at ApplyStyleCommand.cpp:918
#5    0x01b43c1c in WebCore::ApplyStyleCommand::doApply at ApplyStyleCommand.cpp:562
#6    0x01dcbb99 in WebCore::EditCommand::apply at EditCommand.cpp:91
#7    0x01dcbc25 in WebCore::applyCommand at EditCommand.cpp:212
#8    0x01dd2082 in WebCore::Editor::applyStyle at Editor.cpp:729
#9    0x01dd5bf2 in WebCore::Editor::applyStyleToSelection at Editor.cpp:759
#10    0x01ddc19f in WebCore::applyCommandToFrame at EditorCommand.cpp:102
#11    0x01ddc3bf in WebCore::executeToggleStyle at EditorCommand.cpp:175
#12    0x01ddc463 in WebCore::executeToggleBold at EditorCommand.cpp:1005

See also: bug 37197.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.