[Webkit-unassigned] [Bug 38992] REGRESSION: Crash by pasting to a textarea with white-space:nowrap

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu May 13 00:21:36 PDT 2010


https://bugs.webkit.org/show_bug.cgi?id=38992





--- Comment #3 from Tony Chang (Google) <tony at chromium.org>  2010-05-13 00:21:36 PST ---
(In reply to comment #2)
> Created an attachment (id=55952)
 --> (https://bugs.webkit.org/attachment.cgi?id=55952) [details]
> Patch

The crash happens if we're pasting plain text into a white-space:nowrap field.  It happens in code added in r54395, as Kent mentions.  The code added didn't consider the possibility that we could be operating on a document fragment where the root element is a <div>.  When pasting, we create a document fragment from the clipboard text that triggers the crash.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list