[Webkit-unassigned] [Bug 208115] Nullptr crash in WebCore::canHaveChildrenForEditing via CompositeEditCommand::insertNode

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Feb 25 17:04:52 PST 2020


https://bugs.webkit.org/show_bug.cgi?id=208115

Doug Kelly <dougk at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dougk at apple.com

--- Comment #8 from Doug Kelly <dougk at apple.com> ---
Hey Jack,

I just happened to notice unlistify can crash in much the same way -- does it make sense to apply the check at the level of doApply() instead?

doApply() already has an early-abort for if content is not editable:

if (endingSelection().isNoneOrOrphaned() || !endingSelection().isContentRichlyEditable())
    return;

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200226/2971d4c4/attachment.htm>


More information about the webkit-unassigned mailing list