Bug 207873 - Crash when Node::normalize() triggers mutation event that modifies child order
Summary: Crash when Node::normalize() triggers mutation event that modifies child order
Status: RESOLVED INVALID
Alias: None
Product: WebKit
Classification: Unclassified
Component: Layout and Rendering (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2020-02-17 17:58 PST by Sunny He
Modified: 2020-02-17 18:27 PST (History)
9 users (show)

See Also:

Attachments
Patch (4.25 KB, patch)
2020-02-17 18:21 PST, Sunny He 		no flags Details | Formatted Diff | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sunny He 2020-02-17 17:58:57 PST 
rdar://57242999
Comment 1 Sunny He 2020-02-17 18:21:45 PST 
Created attachment 391016 [details]
Patch
Comment 2 Sunny He 2020-02-17 18:27:06 PST 
Whoops wrong radar. Closing and reopening to reset bug importer.