[Webkit-unassigned] [Bug 224587] New: Crash in ReplaceSelectionCommand::mergeEndIfNeeded()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=224587

            Bug ID: 224587
           Summary: Crash in ReplaceSelectionCommand::mergeEndIfNeeded()
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Keywords: InRadar
          Severity: Normal
          Priority: P2
         Component: HTML Editing
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: julian_a_gonzalez at apple.com
                CC: rniwa at webkit.org, wenson_hsieh at apple.com

e.g.

    #0 0x7a80b00f1 in WebCore::Node::parentNode() const+0x21
    #1 0x7abb28ecd in WebCore::CompositeEditCommand::insertNodeBefore(WTF::Ref<WebCore::Node, WTF::RawPtrTraits<WebCore::Node> >&&, WebCore::Node&, WebCore::ShouldAssumeContentIsAlwaysEditable)+0xbd
    #2 0x7abc158cf in WebCore::ReplaceSelectionCommand::mergeEndIfNeeded()+0x36f
    #3 0x7abc18fb9 in WebCore::ReplaceSelectionCommand::doApply()+0x2f29
    #4 0x7abb132d6 in WebCore::CompositeEditCommand::apply()+0x216
    #5 0x7abbd77a9 in WebCore::executeInsertFragment(WebCore::Frame&, WTF::Ref<WebCore::DocumentFragment, WTF::RawPtrTraits<WebCore::DocumentFragment> >&&)+0x159
    #6 0x7abbd7ac0 in WebCore::executeInsertNode(WebCore::Frame&, WTF::Ref<WebCore::Node, WTF::RawPtrTraits<WebCore::Node> >&&)+0x160

<rdar://problem/75220536>

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210414/93b4087f/attachment.htm>