[Webkit-unassigned] [Bug 66241] Crash when inserting text with a trailing newline into a textarea via JS

Wed Aug 31 13:50:06 PDT 2011

https://bugs.webkit.org/show_bug.cgi?id=66241

Ryosuke Niwa <rniwa at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #105744|0                           |1
        is obsolete|                            |

--- Comment #17 from Ryosuke Niwa <rniwa at webkit.org>  2011-08-31 13:50:06 PST ---
Created an attachment (id=105825)
 --> (https://bugs.webkit.org/attachment.cgi?id=105825&action=review)
work in progress 2

The following tests fail with this patch.
  fast/forms/search-disabled-readonly.html
  fast/forms/search-rtl.html
  fast/forms/text-control-intrinsic-widths.html
  fast/forms/textarea-submit-crash.html

Will investigate further but I can probably proceed with RenderText::text move.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.