[Webkit-unassigned] [Bug 35836] New: Crash when backspacing floats with whitespace: pre-wrap.

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=35836

           Summary: Crash when backspacing floats with whitespace:
                    pre-wrap.
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh Intel
        OS/Version: Mac OS X 10.6
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: HTML Editing
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: steven at acko.net


Given a contentEditable div, containing two floats. The first float is normal
and contains text. The second float is set to white-space: pre-wrap and
contains only white space.

Steps to reproducte:
1) Load attached HTML file
2) Place the caret inside the first float at the end of its (text) contents.
3) Press backspace to delete the text

Expected result:
The first float is emptied or deleted.

Actual result:
Crash.

Other notes:
This bug was discovered while trying to implement an advanced tokenized input
field. The odd empty pre-wrap div was placed in an attempt to create more
possible caret positions.

The test case does not crash if:
a) The second float is set to white-space: default.
OR
b) The second float contains text instead of white space.
OR
c) The second float is empty.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.