[Webkit-unassigned] [Bug 66241] Crash when inserting text with a trailing newline into a textarea via JS

Sun Aug 28 21:31:44 PDT 2011

https://bugs.webkit.org/show_bug.cgi?id=66241

Dimitri Glazkov (Google) <dglazkov at chromium.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dglazkov at chromium.org

--- Comment #11 from Dimitri Glazkov (Google) <dglazkov at chromium.org>  2011-08-28 21:31:44 PST ---
(In reply to comment #10)

>   m_frame->document()->updateLayout() in FrameSelection::textWillBeReplaced()
>   ...
>   HTMLFormControlElement::recalcStyle()
>   ...
>   updateFromElementCallback() in HTMLFormControlElement.cpp
>   RenderTextControlMultiLine::updateFromElement()
>   setInnerTextValeu(...) resets the content of innerTextElement().

This is the line that bugs me. Why is it even here?

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.