[Webkit-unassigned] [Bug 119068] Crash in ReplaceSelectionCommand::removeRedundantStylesAndKeepStyleSpanInline

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=119068

Benjamin Poulain <benjamin at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |benjamin at webkit.org

--- Comment #3 from Benjamin Poulain <benjamin at webkit.org> ---
I can reproduce on ToT with the test attached.

Backtrace:
0   com.apple.WebCore                 0x000000010a26ca60 WebCore::ReplaceSelectionCommand::removeRedundantStylesAndKeepStyleSpanInline(WebCore::ReplaceSelectionCommand::InsertedNodes&) + 1152
1   com.apple.WebCore                 0x000000010a272dcb WebCore::ReplaceSelectionCommand::doApply() + 12811
2   com.apple.WebCore                 0x00000001098d2bdf WebCore::CompositeEditCommand::apply() + 143
3   com.apple.WebCore                 0x0000000109b86132 WebCore::Editor::replaceSelectionWithFragment(WTF::PassRefPtr<WebCore::DocumentFragment>, bool, bool, bool, WebCore::MailBlockquoteHandling) + 402
4   com.apple.WebCore                 0x00000001098d0154 WebCore::Editor::handleTextEvent(WebCore::TextEvent*) + 84
5   com.apple.WebCore                 0x00000001098d00e8 WebCore::EventHandler::defaultTextInputEventHandler(WebCore::TextEvent*) + 24
6   com.apple.WebCore                 0x0000000109ba572c WebCore::EventDispatcher::dispatchEvent(WebCore::Node*, WTF::PassRefPtr<WebCore::Event>) + 1532
7   com.apple.WebCore                 0x000000010967c29d WebCore::Node::dispatchEvent(WTF::PassRefPtr<WebCore::Event>) + 29
8   com.apple.WebCore                 0x00000001098c2478 WebCore::EventTarget::dispatchEvent(WTF::PassRefPtr<WebCore::Event>, int&) + 120
9   com.apple.WebCore                 0x0000000109b874a1 WebCore::Editor::pasteAsFragment(WTF::PassRefPtr<WebCore::DocumentFragment>, bool, bool, WebCore::MailBlockquoteHandling) + 161
10  com.apple.WebCore                 0x0000000109b97af5 WebCore::Editor::pasteWithPasteboard(WebCore::Pasteboard*, bool, WebCore::MailBlockquoteHandling) + 373
11  com.apple.WebCore                 0x0000000109b8ae57 WebCore::Editor::paste(WebCore::Pasteboard&) + 183
12  com.apple.WebCore                 0x0000000109b8ad6e WebCore::Editor::paste() + 30
13  com.apple.WebCore                 0x0000000109b9595b WebCore::executePaste(WebCore::Frame&, WebCore::Event*, WebCore::EditorCommandSource, WTF::String const&) + 59
14  com.apple.WebCore                 0x00000001098ddcd6 WebCore::Editor::Command::execute(WTF::String const&, WebCore::Event*) const + 182
15  com.apple.WebCore                 0x0000000109a7423a WebCore::ContextMenuController::contextMenuItemSelected(WebCore::ContextMenuItem*) + 1674
16  com.apple.WebKit                  0x000000010894b2d6 WebKit::WebContextMenu::itemSelected(WebKit::WebContextMenuItemData const&) + 58
17  com.apple.WebKit                  0x00000001089823ca WebKit::WebPage::didSelectItemFromActiveContextMenu(WebKit::WebContextMenuItemData const&) + 26

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150314/0d8ff95d/attachment-0002.html>