Source/WebCore: Crash in DeleteSelectionCommand::handleGeneralDelete when attempting...
[WebKit-https.git] / Source / WebCore / ChangeLog
index f9f8e5536c5176c94ad5d62db1a2b86d76d66fb4..2cb5e45fc0024911c74861ab1e7e73936f75483e 100644 (file)
@@ -1,3 +1,19 @@
+2012-01-31  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Crash in DeleteSelectionCommand::handleGeneralDelete when attempting to delete the start block
+        https://bugs.webkit.org/show_bug.cgi?id=77077
+
+        Reviewed by Enrica Casucci.
+
+        The crash was caused by a missing null check after removing the position out of the start block.
+        Fixed the bug by adding an early return.
+
+        Tests: editing/deleting/delete-start-block.html
+               editing/selection/move-into-empty-root-inline-box.html
+
+        * editing/DeleteSelectionCommand.cpp:
+        (WebCore::DeleteSelectionCommand::handleGeneralDelete):
+
 2012-01-31  Rafael Brandao  <rafael.lobo@openbossa.org>
 
         HTMLIsIndexElement should not expose HTMLInputElement properties