[Webkit-unassigned] [Bug 48989] New: Crash in ApplyStyleCommand::surroundNodeRangeWithElement (preceded by assertion in ApplyStyleCommand::removeInlineStyle) when running editing/style/iframe-onload-crash.html on Windows

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=48989

           Summary: Crash in
                    ApplyStyleCommand::surroundNodeRangeWithElement
                    (preceded by assertion in
                    ApplyStyleCommand::removeInlineStyle) when running
                    editing/style/iframe-onload-crash.html on Windows
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
               URL: http://build.webkit.org/results/Windows%20Release%20(T
                    ests)/r71317%20(5990)/CrashLog_0aec_2010-11-04_03-32-5
                    3-109.txt
        OS/Version: Windows XP
            Status: NEW
          Keywords: LayoutTestFailure, NeedsRadar, PlatformOnly
          Severity: Normal
          Priority: P2
         Component: HTML Editing
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: aroben at apple.com
                CC: adele at apple.com, darin at apple.com, rniwa at webkit.org,
                    enrica at apple.com


editing/style/iframe-onload-crash.html is crashing in ApplyStyleCommand::surroundNodeRangeWithElement on Windows. Before the crash, it hits an assertion in ApplyStyleCommand::removeInlineStyle.

Crash backtrace: http://build.webkit.org/results/Windows%20Release%20(Tests)/r71317%20(5990)/CrashLog_0aec_2010-11-04_03-32-53-109.txt
Assertion backtrace: http://build.webkit.org/results/Windows%20Debug%20(Tests)/r71298%20(21963)/CrashLog_0f58_2010-11-04_03-12-58-562.txt

I've added this test to the Windows Skipped file

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.