[Webkit-unassigned] [Bug 39389] REGRESSION: Renderer crash in WebCore::HTMLElement::isContentEditable() const

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=39389


James Robinson <jamesr at chromium.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |enrica at apple.com,
                   |                            |hyatt at apple.com,
                   |                            |mitz at webkit.org,
                   |                            |simon.fraser at apple.com




--- Comment #3 from James Robinson <jamesr at chromium.org>  2010-05-19 17:04:11 PST ---
+cc some folks with knowledge of this area.

It seems that the basic problem here is that the editing code is calling deep into a subtree that gets detached by the Document::updateStyleIfNeeded() call.  I think the fix is to move the updateStyle call further down the callstack, especially as some bits down there (like htmlediting.cpp's editableRootForPosition() queries information might be affected by style.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.