[Webkit-unassigned] [Bug 175939] New: ASSERTION FAILED: !((anchorType == PositionIsBeforeChildren || anchorType == PositionIsAfterChildren) && (is<Text>(*m_anchorNode) || editingIgnoresContent(*m_anchorNode)))

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=175939

            Bug ID: 175939
           Summary: ASSERTION FAILED: !((anchorType ==
                    PositionIsBeforeChildren || anchorType ==
                    PositionIsAfterChildren) && (is<Text>(*m_anchorNode)
                    || editingIgnoresContent(*m_anchorNode)))
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: New Bugs
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: ryanhaddad at apple.com

Created attachment 318994

  --> https://bugs.webkit.org/attachment.cgi?id=318994&action=review

crash log

This assertion failure is seen with LayoutTest editing/execCommand/forward-delete-read-write-canvas.html

https://build.webkit.org/results/Apple%20iOS%2010%20Simulator%20Debug%20WK2%20(Tests)/r221132%20(3507)/results.html

ASSERTION FAILED: !((anchorType == PositionIsBeforeChildren || anchorType == PositionIsAfterChildren) && (is<Text>(*m_anchorNode) || editingIgnoresContent(*m_anchorNode)))
/Volumes/Data/slave/ios-simulator-10-debug/build/Source/WebCore/dom/Position.cpp(121) : WebCore::Position::Position(WebCore::Node *, WebCore::Position::AnchorType)
1   0x116d3418d WTFCrash
2   0x11bf9032b WebCore::Position::Position(WebCore::Node*, WebCore::Position::AnchorType)
3   0x11bf90363 WebCore::Position::Position(WebCore::Node*, WebCore::Position::AnchorType)
4   0x10c30863a WebCore::firstPositionInNode(WebCore::Node*)
5   0x10c97fe5e WebKit::WebPage::platformEditorState(WebCore::Frame&, WebKit::EditorState&, WebKit::WebPage::IncludePostLayoutDataHint) const
6   0x10c9248c9 WebKit::WebPage::editorState(WebKit::WebPage::IncludePostLayoutDataHint) const
7   0x10c924e3a WebKit::WebPage::sendPartialEditorStateAndSchedulePostLayoutUpdate()
8   0x10c9392fc WebKit::WebPage::didChangeSelection()
9   0x10c983a46 WebKit::WebPage::updateSelectionAppearance()
10  0x10c844882 WebKit::WebFrameLoaderClient::dispatchDidLayout()
11  0x11aa3e7c9 WebCore::FrameView::performPostLayoutTasks()
12  0x11aa453c3 WebCore::FrameView::layout(bool)
13  0x11a667be7 WebCore::Document::updateLayout()
14  0x11a66cdbe WebCore::Document::updateLayoutIgnorePendingStylesheets(WebCore::Document::RunPostLayoutTasks)
15  0x11a7d9886 WebCore::Editor::Command::execute(WTF::String const&, WebCore::Event*) const
16  0x11a681289 WebCore::Document::execCommand(WTF::String const&, bool, WTF::String const&)
17  0x11b1a5de9 WebCore::jsDocumentPrototypeFunctionExecCommandBody(JSC::ExecState*, WebCore::JSDocument*, JSC::ThrowScope&)
18  0x11b191f4e long long WebCore::IDLOperation<WebCore::JSDocument>::call<&(WebCore::jsDocumentPrototypeFunctionExecCommandBody(JSC::ExecState*, WebCore::JSDocument*, JSC::ThrowScope&)), (WebCore::CastedThisErrorBehavior)0>(JSC::ExecState&, char const*)
19  0x11b191cdc WebCore::jsDocumentPrototypeFunctionExecCommand(JSC::ExecState*)
20  0x35cf9967028
21  0x1169a0d16 llint_entry
22  0x1169990e7 vmEntryToJavaScript
23  0x1167859ce JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*)
24  0x116734a88 JSC::Interpreter::executeProgram(JSC::SourceCode const&, JSC::ExecState*, JSC::JSObject*)
25  0x1160c2088 JSC::evaluate(JSC::ExecState*, JSC::SourceCode const&, JSC::JSValue, WTF::NakedPtr<JSC::Exception>&)
26  0x1160c2250 JSC::profiledEvaluate(JSC::ExecState*, JSC::ProfilingReason, JSC::SourceCode const&, JSC::JSValue, WTF::NakedPtr<JSC::Exception>&)
27  0x11c445b6b WebCore::JSMainThreadExecState::profiledEvaluate(JSC::ExecState*, JSC::ProfilingReason, JSC::SourceCode const&, JSC::JSValue, WTF::NakedPtr<JSC::Exception>&)
28  0x11c445958 WebCore::ScriptController::evaluateInWorld(WebCore::ScriptSourceCode const&, WebCore::DOMWrapperWorld&, WebCore::ExceptionDetails*)
29  0x11c445c4d WebCore::ScriptController::evaluate(WebCore::ScriptSourceCode const&, WebCore::ExceptionDetails*)
30  0x11c45aae2 WebCore::ScriptElement::executeClassicScript(WebCore::ScriptSourceCode const&)
31  0x11c4590ef WebCore::ScriptElement::prepareScript(WTF::TextPosition const&, WebCore::ScriptElement::LegacyTypeSupport)
LEAK: 1 WebPageProxy

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170824/b42f8fd4/attachment-0001.html>