[Webkit-unassigned] [Bug 62544] New: REGRESSION (r87067?): Crash in makeRange() when invoking the dictionary panel over a file input

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=62544

           Summary: REGRESSION (r87067?): Crash in makeRange() when
                    invoking the dictionary panel over a file input
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
               URL: data:text/html,%3Cinput%20type=file%3E
        OS/Version: All
            Status: NEW
          Keywords: InRadar, Regression
          Severity: Normal
          Priority: P1
         Component: Forms
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: mitz at webkit.org
                CC: dglazkov at chromium.org, tkent at chromium.org


<radar://problem/9544885>

To reproduce: open the URL, move the mouse cursor over the Choose File button and press Command-Control-D (the default Dictionary panel shortcut).

Results: crash with this backtrace:

0   com.apple.WebCore                 0x00007fff89bb9585 WebCore::makeRange(WebCore::VisiblePosition const&, WebCore::VisiblePosition const&) + 277
1   com.apple.WebCore                 0x00007fff89f8d4ff WebCore::Frame::rangeForPoint(WebCore::IntPoint const&) + 243
2   com.apple.WebKit2                 0x00007fff88509ad1 WebKit::WebPage::performDictionaryLookupAtLocation(WebCore::FloatPoint const&) + 249

In a debug build, an assertion failure occurs in positionInParentAfterNode(), since nonShadowBoundaryParentNode() returns 0 (the parent of the button is a shadow root).

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.