[Webkit-unassigned] [Bug 121791] ASSERTION FAILED: comparePositions(newEnd, newStart) >= 0 in WebCore::ApplyStyleCommand::updateStartEnd

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=121791


Renata Hodovan <reni at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         AssignedTo|webkit-unassigned at lists.web |reni at webkit.org
                   |kit.org                     |
 Attachment #213064|                            |review?, commit-queue-
               Flag|                            |




--- Comment #1 from Renata Hodovan <reni at webkit.org>  2013-10-01 02:04:42 PST ---
Created an attachment (id=213064)
 --> (https://bugs.webkit.org/attachment.cgi?id=213064&action=review)
Proposed patch

I do not have a well enough understanding of what is going on here to be sure the fix is correct, but it seems that TextIterator::handleReplacedElement() emitts an ',' character in TextIterator::handleReplacedElement() (because of the button element) and due to this the endRange of selection will be determined as endContainer + endOffset instead of startContainer + startOffset, what causes that the of startPosition of endRange will be bigger at the assertion than the startPostion of startRange.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.