[Webkit-unassigned] [Bug 202908] Chromium test-case asserts with ASSERTION FAILED: m_offset + m_count <= m_node->length()

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Apr 5 02:06:01 PDT 2024


https://bugs.webkit.org/show_bug.cgi?id=202908

--- Comment #3 from Ahmad Saleem <ahmad.saleem792 at gmail.com> ---
It is still reproducible on WebKit ToT (Minibrowser WK2 Debug - 277105 at main)

Just using JSFiddle - https://jsfiddle.net/8et2go56/


ASSERTION FAILED: m_offset + m_count <= m_node->length()
/Users/ahmadsaleem/Documents/GitHub/WebKit/Source/WebCore/editing/DeleteFromTextNodeCommand.cpp(43) : WebCore::DeleteFromTextNodeCommand::DeleteFromTextNodeCommand(Ref<Text> &&, unsigned int, unsigned int, EditAction)

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20240405/bb8ceecd/attachment.htm>


More information about the webkit-unassigned mailing list