[Webkit-unassigned] [Bug 48646] New: REGRESSION: Assertion failure in TextCheckingHelper::TextCheckingHelper()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=48646

           Summary: REGRESSION: Assertion failure in
                    TextCheckingHelper::TextCheckingHelper()
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Keywords: Regression
          Severity: Normal
          Priority: P1
         Component: HTML Editing
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: mitz at webkit.org
                CC: morrita at google.com, jpu at apple.com


The ASSERT_ARG(m_range, m_range) in the TextCheckingHelper constructor is failing with this backtrace:


#0    0x103da002e in WebCore::TextCheckingHelper::TextCheckingHelper at TextCheckingHelper.cpp:42
#1    0x103d9ff1d in WebCore::TextCheckingHelper::TextCheckingHelper at TextCheckingHelper.cpp:40
#2    0x1031935f9 in WebCore::Editor::markAllMisspellingsAndBadGrammarInRanges at Editor.cpp:2190
#3    0x10318e5d4 in WebCore::Editor::correctionPanelTimerFired at Editor.cpp:2424
#4    0x10319d40c in WebCore::Timer<WebCore::Editor>::fired at Timer.h:98
#5    0x103dcd783 in WebCore::ThreadTimers::sharedTimerFiredInternal at ThreadTimers.cpp:112
#6    0x103dcd539 in WebCore::ThreadTimers::sharedTimerFired at ThreadTimers.cpp:90
#7    0x103c35959 in WebCore::timerFired at SharedTimerMac.mm:166

The grammarRange parameter to markAllMisspellingsAndBadGrammarInRanges() is allowed to be 0, but now this method tries to use it to construct a TextCheckingHelper without checking.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.