<html>
    <head>
      <base href="https://bugs.webkit.org/" />
    </head>
    <body><table border="1" cellspacing="0" cellpadding="8">
        <tr>
          <th>Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - Should never be reached failure in WebCore::VisibleSelection::adjustSelectionToAvoidCrossingEditingBoundaries"
   href="https://bugs.webkit.org/show_bug.cgi?id=151037">151037</a>
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>Should never be reached failure in WebCore::VisibleSelection::adjustSelectionToAvoidCrossingEditingBoundaries
          </td>
        </tr>

        <tr>
          <th>Classification</th>
          <td>Unclassified
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>WebKit
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>WebKit Local Build
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>Unspecified
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>Unspecified
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>NEW
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>Normal
          </td>
        </tr>

        <tr>
          <th>Priority</th>
          <td>P2
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>HTML Editing
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>webkit-unassigned&#64;lists.webkit.org
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>rhodovan.u-szeged&#64;partner.samsung.com
          </td>
        </tr>

        <tr>
          <th>CC</th>
          <td>rniwa&#64;webkit.org
          </td>
        </tr>

        <tr>
          <th>Blocks</th>
          <td>116980
          </td>
        </tr></table>
      <p>
        <div>
        <pre>Created <span class=""><a href="attachment.cgi?id=265065" name="attach_265065" title="Test">attachment 265065</a> <a href="attachment.cgi?id=265065&amp;action=edit" title="Test">[details]</a></span>
Test

Load the attached test with debug MiniBrowser:

&lt;style&gt;
*  {
    display: table;
     -webkit-flow-into:flow_0;
}
&lt;/style&gt;
&lt;script&gt;
    document.designMode = 'on';
    document.execCommand(&quot;selectAll&quot;, false, null); 
&lt;/script&gt;


OS: Ubuntu 14.10 x86_64
Checked build: debug EFL
Checked version: 9fa8210


Backtrace:

SHOULD NEVER BE REACHED
../../Source/WebCore/editing/VisibleSelection.cpp(595) : void WebCore::VisibleSelection::adjustSelectionToAvoidCrossingEditingBoundaries()
1   0x7f69d1beee17 WTFCrash
2   0x7f69d7ed044a WebCore::VisibleSelection::adjustSelectionToAvoidCrossingEditingBoundaries()
3   0x7f69d7ecf798 WebCore::VisibleSelection::validate(WebCore::TextGranularity)
4   0x7f69d7ecce4c WebCore::VisibleSelection::VisibleSelection(WebCore::Range const&amp;, WebCore::EAffinity, bool)
5   0x7f69d871268c WebCore::SelectionSubtreeRoot::adjustForVisibleSelection(WebCore::Document&amp;)
6   0x7f69d86ee5d6 WebCore::RenderView::updateSelectionForSubtrees(WTF::HashMap&lt;WebCore::SelectionSubtreeRoot*, WebCore::SelectionSubtreeRoot::SelectionSubtreeData, WTF::PtrHash&lt;WebCore::SelectionSubtreeRoot*&gt;, WTF::HashTraits&lt;WebCore::SelectionSubtreeRoot*&gt;, WTF::HashTraits&lt;WebCore::SelectionSubtreeRoot::SelectionSubtreeData&gt; &gt;&amp;, WebCore::RenderView::SelectionRepaintMode)
7   0x7f69d86ee406 WebCore::RenderView::splitSelectionBetweenSubtrees(WebCore::RenderObject const*, int, WebCore::RenderObject const*, int, WebCore::RenderView::SelectionRepaintMode)
8   0x7f69d86edfb5 WebCore::RenderView::setSelection(WebCore::RenderObject*, int, WebCore::RenderObject*, int, WebCore::RenderView::SelectionRepaintMode)
9   0x7f69d7e8fe34 WebCore::FrameSelection::updateAppearance()
10  0x7f69d7e85c12 WebCore::FrameSelection::updateAndRevealSelection(WebCore::AXTextStateChangeIntent const&amp;)
11  0x7f69d7e85b42 WebCore::FrameSelection::setSelection(WebCore::VisibleSelection const&amp;, unsigned int, WebCore::AXTextStateChangeIntent, WebCore::FrameSelection::CursorAlignOnScroll, WebCore::TextGranularity)
12  0x7f69d7e8f335 WebCore::FrameSelection::selectAll()
13  0x7f69d7e7dd2e
14  0x7f69d7e7fcde WebCore::Editor::Command::execute(WTF::String const&amp;, WebCore::Event*) const
15  0x7f69d7d2446d WebCore::Document::execCommand(WTF::String const&amp;, bool, WTF::String const&amp;)
16  0x7f69d945606b WebCore::jsDocumentPrototypeFunctionExecCommand(JSC::ExecState*)
17  0x7f697b7ff0c8
Aborted (core dumped)

Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x00007f69d1beee1c in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:321
321     *(int *)(uintptr_t)0xbbadbeef = 0;
#0  0x00007f69d1beee1c in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:321
#1  0x00007f69d7ed044a in WebCore::VisibleSelection::adjustSelectionToAvoidCrossingEditingBoundaries (this=0x7ffc74dfb7b0) at ../../Source/WebCore/editing/VisibleSelection.cpp:595
#2  0x00007f69d7ecf798 in WebCore::VisibleSelection::validate (this=0x7ffc74dfb7b0, granularity=WebCore::CharacterGranularity) at ../../Source/WebCore/editing/VisibleSelection.cpp:426
#3  0x00007f69d7ecce4c in WebCore::VisibleSelection::VisibleSelection (this=0x7ffc74dfb7b0, range=..., affinity=WebCore::DOWNSTREAM, isDirectional=false) at ../../Source/WebCore/editing/VisibleSelection.cpp:93
#4  0x00007f69d871268c in WebCore::SelectionSubtreeRoot::adjustForVisibleSelection (this=0x7f69bbae5568, document=...) at ../../Source/WebCore/rendering/SelectionSubtreeRoot.cpp:60
#5  0x00007f69d86ee5d6 in WebCore::RenderView::updateSelectionForSubtrees (this=0x7f69bbade228, renderSubtreesMap=..., blockRepaintMode=WebCore::RenderView::RepaintNewXOROld) at ../../Source/WebCore/rendering/RenderView.cpp:953
#6  0x00007f69d86ee406 in WebCore::RenderView::splitSelectionBetweenSubtrees (this=0x7f69bbade228, start=0x7f69bbaab000, startPos=0, end=0x7f69bbaab000, endPos=1, blockRepaintMode=WebCore::RenderView::RepaintNewXOROld) at ../../Source/WebCore/rendering/RenderView.cpp:938
#7  0x00007f69d86edfb5 in WebCore::RenderView::setSelection (this=0x7f69bbade228, start=0x7f69bbaab000, startPos=0, end=0x7f69bbaab000, endPos=1, blockRepaintMode=WebCore::RenderView::RepaintNewXOROld) at ../../Source/WebCore/rendering/RenderView.cpp:897
#8  0x00007f69d7e8fe34 in WebCore::FrameSelection::updateAppearance (this=0x7f69bbaea230) at ../../Source/WebCore/editing/FrameSelection.cpp:1948
#9  0x00007f69d7e85c12 in WebCore::FrameSelection::updateAndRevealSelection (this=0x7f69bbaea230, intent=...) at ../../Source/WebCore/editing/FrameSelection.cpp:378
#10 0x00007f69d7e85b42 in WebCore::FrameSelection::setSelection (this=0x7f69bbaea230, selection=..., options=7, intent=..., align=WebCore::FrameSelection::AlignCursorOnScrollIfNeeded, granularity=WebCore::CharacterGranularity) at ../../Source/WebCore/editing/FrameSelection.cpp:352
#11 0x00007f69d7e8f335 in WebCore::FrameSelection::selectAll (this=0x7f69bbaea230) at ../../Source/WebCore/editing/FrameSelection.cpp:1792
#12 0x00007f69d7e7dd2e in WebCore::executeSelectAll (frame=...) at ../../Source/WebCore/editing/EditorCommand.cpp:988
#13 0x00007f69d7e7fcde in WebCore::Editor::Command::execute (this=0x7ffc74dfc090, parameter=..., triggeringEvent=0x0) at ../../Source/WebCore/editing/EditorCommand.cpp:1703
#14 0x00007f69d7d2446d in WebCore::Document::execCommand (this=0x7f69bb826a40, commandName=..., userInterface=false, value=...) at ../../Source/WebCore/dom/Document.cpp:4657
#15 0x00007f69d945606b in WebCore::jsDocumentPrototypeFunctionExecCommand (state=0x7ffc74dfc160) at DerivedSources/WebCore/JSDocument.cpp:5066
#16 0x00007f697b7ff0c8 in ?? ()
#17 0x00007ffc74dfc1e0 in ?? ()
#18 0x00007f69d1b975e4 in llint_entry () from webkit/WebKitBuild/Debug/lib/libjavascriptcore_efl.so.1</pre>
        </div>
      </p>
      <hr>
      <span>You are receiving this mail because:</span>
      
      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>