[Webkit-unassigned] [Bug 92190] New: ASSERTION FAILED: m_affinity == DOWNSTREAM : void WebCore::VisibleSelection::setWithoutValidation(const WebCore::Position &, const WebCore::Position &)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=92190

           Summary: ASSERTION FAILED: m_affinity == DOWNSTREAM : void
                    WebCore::VisibleSelection::setWithoutValidation(const
                    WebCore::Position &, const WebCore::Position &)
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh Intel
               URL: https://twitter.com/#!/search/%22Christian%20Bale%22
        OS/Version: Other
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: WebCore JavaScript
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: rex_4539 at yahoo.com


Created an attachment (id=154205)
 --> (https://bugs.webkit.org/attachment.cgi?id=154205&action=review)
Screenshot.

r123549

Reproducibility: always

Steps:
1. Go to https://twitter.com/#!/search/%22Christian%20Bale%22
2. Scroll down until you find the post from "AMC Theatres".
3. Click on the post to expand the inline photo.

What happened:
ASSERTION FAILED: m_affinity == DOWNSTREAM
/Users/rex/WebKit/Source/WebCore/editing/VisibleSelection.cpp(450) : void WebCore::VisibleSelection::setWithoutValidation(const WebCore::Position &, const WebCore::Position &)
1   0x109fb6463 WebCore::VisibleSelection::setWithoutValidation(WebCore::Position const&, WebCore::Position const&)
2   0x108ee972c WebCore::FrameSelection::respondToNodeModification(WebCore::Node*, bool, bool, bool, bool)
3   0x108ee95cb WebCore::FrameSelection::nodeWillBeRemoved(WebCore::Node*)
4   0x108bece0a WebCore::Document::nodeWillBeRemoved(WebCore::Node*)
5   0x108a092b1 WebCore::willRemoveChild(WebCore::Node*)
6   0x108a08fc8 WebCore::ContainerNode::removeChild(WebCore::Node*, int&)
7   0x108a080f8 WebCore::collectChildrenAndRemoveFromOldParent(WebCore::Node*, WTF::Vector<WTF::RefPtr<WebCore::Node>, 11ul>&, int&)
8   0x108a07ece WebCore::ContainerNode::appendChild(WTF::PassRefPtr<WebCore::Node>, int&, bool)
9   0x10987ad0a WebCore::Node::appendChild(WTF::PassRefPtr<WebCore::Node>, int&, bool)
10  0x1095042c1 WebCore::JSNode::appendChild(JSC::ExecState*)
11  0x1095005ee WebCore::jsNodePrototypeFunctionAppendChild(JSC::ExecState*)
12  0x10e628265
13  0x107c78e84 JSC::JITCode::execute(JSC::RegisterFile*, JSC::ExecState*, JSC::JSGlobalData*)
14  0x107c75bef JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&)
15  0x107b291c8 JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&)
16  0x10928efd2 WebCore::JSMainThreadExecState::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&)
17  0x1093bae8e WebCore::JSEventListener::handleEvent(WebCore::ScriptExecutionContext*, WebCore::Event*)
18  0x108e29a57 WebCore::EventTarget::fireEventListeners(WebCore::Event*, WebCore::EventTargetData*, WTF::Vector<WebCore::RegisteredEventListener, 1ul>&)
19  0x108e298bb WebCore::EventTarget::fireEventListeners(WebCore::Event*)
20  0x109882fab WebCore::Node::handleLocalEvents(WebCore::Event*)
21  0x108dfb654 WebCore::EventContext::handleLocalEvents(WebCore::Event*) const
22  0x108dfccaa WebCore::EventDispatcher::dispatchEvent(WTF::PassRefPtr<WebCore::Event>)
23  0x109854870 WebCore::MouseEventDispatchMediator::dispatchEvent(WebCore::EventDispatcher*) const
24  0x108dfc03c WebCore::EventDispatcher::dispatchEvent(WebCore::Node*, WTF::PassRefPtr<WebCore::EventDispatchMediator>)
25  0x10988396b WebCore::Node::dispatchMouseEvent(WebCore::PlatformMouseEvent const&, WTF::AtomicString const&, int, WebCore::Node*)
26  0x108e0cda4 WebCore::EventHandler::dispatchMouseEvent(WTF::AtomicString const&, WebCore::Node*, bool, int, WebCore::PlatformMouseEvent const&, bool)
27  0x108e0f275 WebCore::EventHandler::handleMouseReleaseEvent(WebCore::PlatformMouseEvent const&)
28  0x106d34a76 WebKit::handleMouseEvent(WebKit::WebMouseEvent const&, WebKit::WebPage*, bool)
29  0x106d348ef WebKit::WebPage::mouseEvent(WebKit::WebMouseEvent const&)
30  0x106d6ad47 void CoreIPC::callMemberFunction<WebKit::WebPage, void (WebKit::WebPage::*)(WebKit::WebMouseEvent const&), WebKit::WebMouseEvent>(CoreIPC::Arguments1<WebKit::WebMouseEvent> const&, WebKit::WebPage*, void (WebKit::WebPage::*)(WebKit::WebMouseEvent const&))
31  0x106d5ff32 void CoreIPC::handleMessage<Messages::WebPage::MouseEvent, WebKit::WebPage, void (WebKit::WebPage::*)(WebKit::WebMouseEvent const&)>(CoreIPC::ArgumentDecoder*, WebKit::WebPage*, void (WebKit::WebPage::*)(WebKit::WebMouseEvent const&))

Expected result:
No assert failure.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.