Closed
Bug 766413
Opened 13 years ago
Closed 13 years ago
Crash with contentReadOnly, forwardDelete
Categories
(Core :: DOM: Editor, defect)
Core
DOM: Editor
Tracking
()
RESOLVED
FIXED
mozilla16
People
(Reporter: jruderman, Assigned: ayg)
References
Details
(Keywords: crash, testcase)
Crash Data
Attachments
(3 files)
Messy testcase. I guess some state is not visible to serializeDOMAsScript :/
|
Reporter | |
Comment 1•13 years ago
|
||
|
|
Reporter | |
Comment 2•13 years ago
|
||
Crash Signature: [@ nsEditor::CreateTxnForDeleteInsertionPoint ]
|
||
Comment 3•13 years ago
|
||
Aryeh, can you please take a look?
|
Assignee | |
Updated•13 years ago
|
Assignee: nobody → ayg
Status: NEW → ASSIGNED
|
|
Assignee | |
Comment 4•13 years ago
|
||
This was bug 762183 part 4. It added a while loop to change selectedNode's value, but didn't account for the fact that it might set it to null. Just need a null check here.
Blocks: 762183
|
|
Assignee | |
Comment 5•13 years ago
|
||
Attachment #634809 -
Flags: review?(ehsan)
|
||
Comment 6•13 years ago
|
||
On Windows: bp-591d4a60-3df4-4f94-8c9f-12fb72120620.
Crash Signature: [@ nsEditor::CreateTxnForDeleteInsertionPoint ] → [@ nsEditor::CreateTxnForDeleteInsertionPoint ]
[@ nsEditor::CreateTxnForDeleteInsertionPoint(nsRange*, short, EditAggregateTxn*, nsINode**, int*, int*) ]
OS: Mac OS X → All
Hardware: x86_64 → All
|
|
||
Updated•13 years ago
|
Attachment #634809 -
Flags: review?(ehsan) → review+
|
||
Comment 7•13 years ago
|
||
Target Milestone: --- → mozilla16
|
|
||
Comment 8•13 years ago
|
||
Status: ASSIGNED → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•