-
inferno@chromium.org authored
Reviewed by Adam Barth. Fix crash in ReplaceSelectionCommand::doApply when selection is modified during execution. https://bugs.webkit.org/show_bug.cgi?id=50840 Test: editing/execCommand/insertHTML-mutation-crash.html * editing/ReplaceSelectionCommand.cpp: (WebCore::ReplaceSelectionCommand::copyStyleToChildren): Replaced raw node pointer with RefPtr. (WebCore::ReplaceSelectionCommand::doApply): Replaced raw node pointer with RefPtr and added null check. 2010-12-10 Emil Eklund <eae@chromium.org> Reviewed by Adam Barth. Add testcase for ReplaceSelectionCommand crash. https://bugs.webkit.org/show_bug.cgi?id=50840 * editing/execCommand/insertHTML-mutation-crash.html: Added. git-svn-id: http://svn.webkit.org/repository/webkit/trunk@73801 268f45cc-cd09-0410-ab3c-d52691b4dbfc
005063e1