WebCore:
authorantti <antti@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Mon, 27 Aug 2007 00:11:58 +0000 (00:11 +0000)
committerantti <antti@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Mon, 27 Aug 2007 00:11:58 +0000 (00:11 +0000)
commitc2d3d89aff29320a156d1d09def1ec15e1028517
treedc6d073616697bb3194fdd5de30c066540251d19
parentfed65716aef80975f9f88f500639ecd2848e213c
WebCore:

        Reviewed by Darin.

        Fix for <rdar://problem/5433726>
        Mail crash at WebCore::Frame::styleForSelectionStart() when deleting a selection in a HTML message (http://www.yahoo.com/)

        Test: editing/style/temporary-span-crash.html

        * page/Frame.cpp:
        (WebCore::Frame::styleForSelectionStart):
        Temporary span created here might not have renderer if document has style sheet that makes it display:none.
        Set display:inline explicitly in spans style attribute. This temporary span does not need to get its display
        value from actual document style sheets. Null check the renderer too to be sure.

LayoutTests:

        Reviewed by Darin.

        Test for <rdar://problem/5433726>
        Mail crash at WebCore::Frame::styleForSelectionStart() when deleting a selection in a HTML message (http://www.yahoo.com/)

        * editing/style/temporary-span-crash-expected.txt: Added.
        * editing/style/temporary-span-crash.html: Added.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@25255 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog
LayoutTests/editing/style/temporary-span-crash-expected.txt [new file with mode: 0644]
LayoutTests/editing/style/temporary-span-crash.html [new file with mode: 0644]
WebCore/ChangeLog
WebCore/page/Frame.cpp