[Webkit-unassigned] [Bug 222219] REGRESSION (r272928): ASSERT NOT REACHED in WebCore::FrameSelection::setSelectionWithoutUpdatingAppearance

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=222219

--- Comment #3 from Ryosuke Niwa <rniwa at webkit.org> ---
I can reproduce this crash with the following command:
./Tools/Scripts/run-webkit-tests --ios-simulator --debug --no-build --no-retry editing/input/select-all-clear-input-method.html editing/input/set-value-on-input-and-delete.html --force

It looks like the issue is that we're not canceling the composition in time when we're navigating to a new document.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210222/a69612b0/attachment.htm>