[Webkit-unassigned] [Bug 66241] Crash when inserting text with a trailing newline into a textarea via JS

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=66241





--- Comment #5 from Kent Tamura <tkent at chromium.org>  2011-08-24 01:32:26 PST ---
Why is the textNode detached by m_frame->document()->updateLayout()?

Why does "#container + * { clear: both; }" affect? It looks to be unrelated to <textarea>.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.