<rdar://88813941>
Created attachment 453630 [details] Patch
Comment on attachment 453630 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=453630&action=review > Source/WebCore/rendering/RenderText.cpp:1297 > - int delta = newText.length() - text().length(); > + unsigned delta = std::abs(static_cast<int>(newText.length() - text().length())); This doesn't seem right. dirtyRange() is written to accept negative delta values; see the assertion in offsetRun(). This clamping needs to be more nuanced somehow.
Created attachment 460797 [details] patch
Pull request: https://github.com/WebKit/WebKit/pull/2660
Committed 252736@main (22aafa30b9a2): <https://commits.webkit.org/252736@main> Reviewed commits have been landed. Closing PR #2660 and removing active labels.