[Webkit-unassigned] [Bug 88500] New: [Crash][Editing] VisibleSelection::adjustSelectionToAvoidCrossingEditingBoundaries() crashes in some Shadow DOM case

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=88500

           Summary: [Crash][Editing]
                    VisibleSelection::adjustSelectionToAvoidCrossingEditin
                    gBoundaries() crashes in some Shadow DOM case
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: HTML Editing
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: shinyak at chromium.org
            Blocks: 82697


HTML 
<div contenteditable>
    <div>BEFORE HOST</div>
    <div id="host" contenteditable="false">     a     </div>
</div>

Shadow DOM for host
<div id="shadow-host">SHADOW (BEFORE)<shadow></shadow>SHADOW (AFTER)</div>

Nested Shadow DOM for shadow-host
<div contenteditable>NESTED BEFORE<shadow></shadow>NESTED AFTER</div>


Select from 'a' to left, then ASSERTION triggered.

SHOULD NEVER BE REACHED
VisibleSelection.cpp(592) : adjustSelectionToAvoidCrossingEditingBoundaries()

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.