[Webkit-unassigned] [Bug 74585] Crash when navigating with arrow key into empty anchor block with padding

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=74585





--- Comment #16 from Daniel Jalkut <jalkut at red-sweater.com>  2011-12-30 15:15:41 PST ---
(In reply to comment #15)
> How can it have a child and not a leaf? Can you call box->showLineTreeForThis() and print out the line tree ?

It seems that the RootInlineBox being targeted (the one that contains this pesky empty anchor node) contains only an "InlineFlowBox" which seems to have its "isLeaf()" hardcoded to false. I tried changing the implementation of isLeaf to return true if it has no children, but that seemed to cause logic problems elsewhere.

(gdb) call (void) box->showLineTreeForThis()
RenderBlock 0x10919b2d8                    P    0x10d954c30
  RootInlineBox    0x10911d638                RenderBlock 0x10919b2d8
    InlineTextBox    0x1091c4ed8              RenderText 0x109181a88 (0,74) "Click to place the editing cursor anywhere on this line ... then click the"
  RootInlineBox    0x1091c45d8                RenderBlock 0x10919b2d8
*   InlineTextBox    0x1091d7998              RenderText 0x109181a88 (75,86) "down arrow."
    InlineTextBox    0x10dc04398              RenderBR 0x1091a92f8   (0,1) "\n"
  RootInlineBox    0x10911a9e8                RenderBlock 0x10919b2d8
    InlineFlowBox    0x1091de488              RenderInline 0x1091849a8
(gdb) p root
$7 = ('WebCore::RootInlineBox' *) 0x10911a9e8
(gdb) p root->isLeaf()
$8 = false
(gdb) p root->m_firstChild->isLeaf()
$9 = false

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.