[Webkit-unassigned] [Bug 63440] New: ASSERTION FAILED in Range::Range causes a crash in QtTestBrowser

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=63440

           Summary: ASSERTION FAILED in Range::Range causes a crash in
                    QtTestBrowser
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: New Bugs
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: aparna.nand at wipro.com


Steps to reproduce the problem
1. Open QtTestBrowser
2. Go to any website where navigating to a link on that website is relatively slow. Example, http://html5demos.com/drag-anything
3. Once the page is loaded click on link "Fork me on GitHub"
3. The browser begins to fetch the new page, but the old page is still displayed for few more seconds.
4. So in the old web page, start selecting some text by double clicking on the text (Note: reproducible only when double clicked). You may have to do it continously to easily reproduce the problem.

Expected result:
Either the new page is displayed or nothing happens on the old page or you are able to make a selection on the old page till the new page is displayed.

Actual result:
Asserts and crashes

Reproducibility:
1 in every 2 attempts

Backtrace:

ASSERTION FAILED: !ec
../../../Source/WebCore/dom/Range.cpp(93) : WebCore::Range::Range(WTF::PassRefPtr<WebCore::Document>, WTF::PassRefPtr<WebCore::Node>, int, WTF::PassRefPtr<WebCore::Node>, int)

Program received signal SIGSEGV, Segmentation fault.
0x019890d8 in WebCore::Range::Range (this=0xb4b64a28, ownerDocument=..., 
    startContainer=..., startOffset=0, endContainer=..., endOffset=0)
    at ../../../Source/WebCore/dom/Range.cpp:93
93        ASSERT(!ec);
(gdb) bt
#0  0x019890d8 in WebCore::Range::Range (this=0xb4b64a28, ownerDocument=..., 
    startContainer=..., startOffset=0, endContainer=..., endOffset=0)
    at ../../../Source/WebCore/dom/Range.cpp:93
#1  0x0198928b in WebCore::Range::create (ownerDocument=..., 
    startContainer=..., startOffset=0, endContainer=..., endOffset=0)
    at ../../../Source/WebCore/dom/Range.cpp:100
#2  0x01a14797 in WebCore::SimplifiedBackwardsTextIterator::range (
    this=0xbfffddb4) at ../../../Source/WebCore/editing/TextIterator.cpp:1250
#3  0x01a29bb6 in WebCore::previousBoundary (c=..., 
    searchFunction=0x1a2abef <WebCore::startWordBoundary(UChar const*, unsigned int, unsigned int, WebCore::BoundarySearchContextAvailability, bool&)>)
    at ../../../Source/WebCore/editing/visible_units.cpp:122
#4  0x01a2adfd in WebCore::startOfWord (c=..., 
    side=WebCore::LeftWordIfOnBoundary)
    at ../../../Source/WebCore/editing/visible_units.cpp:255

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.