[Webkit-unassigned] [Bug 38992] REGRESSION: Crash by pasting to a textarea with white-space:nowrap
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Thu May 13 00:21:36 PDT 2010
https://bugs.webkit.org/show_bug.cgi?id=38992
--- Comment #3 from Tony Chang (Google) <tony at chromium.org> 2010-05-13 00:21:36 PST ---
(In reply to comment #2)
> Created an attachment (id=55952)
--> (https://bugs.webkit.org/attachment.cgi?id=55952) [details]
> Patch
The crash happens if we're pasting plain text into a white-space:nowrap field. It happens in code added in r54395, as Kent mentions. The code added didn't consider the possibility that we could be operating on a document fragment where the root element is a <div>. When pasting, we create a document fragment from the clipboard text that triggers the crash.
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list