nephele
/
haikuwebkit
1
0
Fork 0
Code Issues Releases Activity
haikuwebkit/LayoutTests/fast/editing/paste-and-match-style-with-...

5 lines
90 B
Plaintext
Raw Permalink Normal View History

Nullptr crash in CompositeEditCommand::splitTreeToNode via InsertParagraphSeparatorCommand::doApply https://bugs.webkit.org/show_bug.cgi?id=221387 Patch by Frederic Wang <fwang@igalia.com> on 2021-02-24 Reviewed by Ryosuke Niwa. Source/WebCore: WebCore::Position::upstream behaves specially for table renderer, which may confuse the execution of WebCore::InsertParagraphSeparatorCommand::doApply() when the visible position is within a table, leading to a debug assertion failure and a nullptr dereference in release build. This patch fixes that by forcing createFragmentFromText to convert <table> to new a default paragraph element. Test: fast/editing/paste-and-match-style-with-table-crash.html * editing/markup.cpp: (WebCore::createFragmentFromText): Don't clone enclosing block that are <table>. LayoutTests: * fast/editing/paste-and-match-style-with-table-crash-expected.txt: Added. * fast/editing/paste-and-match-style-with-table-crash.html: Added. Canonical link: https://commits.webkit.org/234502@main git-svn-id: https://svn.webkit.org/repository/webkit/trunk@273375 268f45cc-cd09-0410-ab3c-d52691b4dbfc
2021-02-24 09:20:30 +00:00
CONSOLE MESSAGE: This test passes if it does not crash.
head, style { display: block; }