[Webkit-unassigned] [Bug 257563] REGRESSION(264722 at main) ASSERTION FAILED: forward ? nativeIndex < nativeLength : nativeIndex <= nativeLength in WTF::textUTF16ContextAwareMoveInPrimaryContext

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=257563

--- Comment #1 from Fujii Hironori <Hironori.Fujii at sony.com> ---
Created attachment 466553

  --> https://bugs.webkit.org/attachment.cgi?id=466553&action=review

test case

WinCairo Debug MiniBrowser can reproduce the crash by loading this test case.
Variables in the assertion were
forward = 1
nativeIndex = 1
nativeLength = 1

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20230531/595b36f1/attachment.htm>