[Webkit-unassigned] [Bug 74585] Crash when navigating with arrow key into empty anchor block with padding
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Fri Dec 30 15:15:40 PST 2011
https://bugs.webkit.org/show_bug.cgi?id=74585
--- Comment #16 from Daniel Jalkut <jalkut at red-sweater.com> 2011-12-30 15:15:41 PST ---
(In reply to comment #15)
> How can it have a child and not a leaf? Can you call box->showLineTreeForThis() and print out the line tree ?
It seems that the RootInlineBox being targeted (the one that contains this pesky empty anchor node) contains only an "InlineFlowBox" which seems to have its "isLeaf()" hardcoded to false. I tried changing the implementation of isLeaf to return true if it has no children, but that seemed to cause logic problems elsewhere.
(gdb) call (void) box->showLineTreeForThis()
RenderBlock 0x10919b2d8 P 0x10d954c30
RootInlineBox 0x10911d638 RenderBlock 0x10919b2d8
InlineTextBox 0x1091c4ed8 RenderText 0x109181a88 (0,74) "Click to place the editing cursor anywhere on this line ... then click the"
RootInlineBox 0x1091c45d8 RenderBlock 0x10919b2d8
* InlineTextBox 0x1091d7998 RenderText 0x109181a88 (75,86) "down arrow."
InlineTextBox 0x10dc04398 RenderBR 0x1091a92f8 (0,1) "\n"
RootInlineBox 0x10911a9e8 RenderBlock 0x10919b2d8
InlineFlowBox 0x1091de488 RenderInline 0x1091849a8
(gdb) p root
$7 = ('WebCore::RootInlineBox' *) 0x10911a9e8
(gdb) p root->isLeaf()
$8 = false
(gdb) p root->m_firstChild->isLeaf()
$9 = false
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list