-
inferno@chromium.org authored
https://bugs.webkit.org/show_bug.cgi?id=80828 Reviewed by Ryosuke Niwa. Source/WebCore: Test: fast/text/split-text-crash.xhtml * dom/Range.cpp: (WebCore::Range::insertNode): replace m_start.container() calls with ref protected node. LayoutTests: * fast/text/split-text-crash-expected.txt: Added. * fast/text/split-text-crash.xhtml: Added. git-svn-id: http://svn.webkit.org/repository/webkit/trunk@110487 268f45cc-cd09-0410-ab3c-d52691b4dbfc
c87655ba