[webkit-changes] [263564] trunk

Title: [263564] trunk Revision 263564 Author shihchieh_...@apple.com Date 2020-06-26 09:44:31 -0700 (Fri, 26 Jun 2020) Log Message ASSERTION FAILED: (it != m_map.end()) in TreeScopeOrderedMap::remove https://bugs.webkit.org/show_bug.cgi?id=213611 Reviewed by Geoffrey Garen.

[webkit-changes] [262593] trunk

Title: [262593] trunk Revision 262593 Author shihchieh_...@apple.com Date 2020-06-04 20:37:14 -0700 (Thu, 04 Jun 2020) Log Message Nullptr crash in DeleteSelectionCommand::doApply() when ending position is disconnected. https://bugs.webkit.org/show_bug.cgi?id=212723 Reviewed by

[webkit-changes] [262103] trunk/Source/WebCore

Title: [262103] trunk/Source/WebCore Revision 262103 Author shihchieh_...@apple.com Date 2020-05-23 13:13:57 -0700 (Sat, 23 May 2020) Log Message ASSERTION FAILED: (!s_current || _view != _current->m_view) in RenderTreeBuilder::RenderTreeBuilder

[webkit-changes] [262095] trunk

Title: [262095] trunk Revision 262095 Author shihchieh_...@apple.com Date 2020-05-22 22:53:52 -0700 (Fri, 22 May 2020) Log Message ASSERTION FAILED: (!s_current || _view != _current->m_view) in RenderTreeBuilder::RenderTreeBuilder https://bugs.webkit.org/show_bug.cgi?id=212163 Reviewed

[webkit-changes] [261777] trunk

Title: [261777] trunk Revision 261777 Author shihchieh_...@apple.com Date 2020-05-15 21:09:51 -0700 (Fri, 15 May 2020) Log Message Nullptr crash in WebCore::Node::treeScope() when processing nested list insertion commands. https://bugs.webkit.org/show_bug.cgi?id=211964 Reviewed by

[webkit-changes] [261666] trunk

Title: [261666] trunk Revision 261666 Author shihchieh_...@apple.com Date 2020-05-13 17:45:45 -0700 (Wed, 13 May 2020) Log Message Nullptr crash in InsertParagraphSeparatorCommand::doApply when the canonical position is uneditable https://bugs.webkit.org/show_bug.cgi?id=211864 Reviewed

[webkit-changes] [261664] trunk

Title: [261664] trunk Revision 261664 Author shihchieh_...@apple.com Date 2020-05-13 17:21:50 -0700 (Wed, 13 May 2020) Log Message Nullptr crash in DeleteSelectionCommand::doApply() when merge node is disconnected. https://bugs.webkit.org/show_bug.cgi?id=211793 Reviewed by Geoffrey

[webkit-changes] [261434] trunk

Title: [261434] trunk Revision 261434 Author shihchieh_...@apple.com Date 2020-05-09 01:07:27 -0700 (Sat, 09 May 2020) Log Message Nullptr crash in LegacyWebArchive::createPropertyListRepresentation when copying selected range that contains surrogate characters

[webkit-changes] [261338] trunk/Source/WebCore

Title: [261338] trunk/Source/WebCore Revision 261338 Author shihchieh_...@apple.com Date 2020-05-07 15:58:14 -0700 (Thu, 07 May 2020) Log Message In Document::willBeRemovedFromFrame, clear FrameSelection before Editor so the selection is removed.

[webkit-changes] [261258] trunk

Title: [261258] trunk Revision 261258 Author shihchieh_...@apple.com Date 2020-05-06 16:16:14 -0700 (Wed, 06 May 2020) Log Message Nullptr crash in indentOutdentCommand::formatRange with asynchronous commands: indent and insert list. https://bugs.webkit.org/show_bug.cgi?id=211466

[webkit-changes] [261255] trunk

Title: [261255] trunk Revision 261255 Author shihchieh_...@apple.com Date 2020-05-06 15:55:30 -0700 (Wed, 06 May 2020) Log Message Nullptr crash in InsertListCommand::doApply with user-select:none elements https://bugs.webkit.org/show_bug.cgi?id=211534 Reviewed by Geoffrey Garen.

[webkit-changes] [261126] trunk

Title: [261126] trunk Revision 261126 Author shihchieh_...@apple.com Date 2020-05-04 16:55:06 -0700 (Mon, 04 May 2020) Log Message Nullptr crash in CompositeEditCommand::moveParagraphs when changing style on elements that are user-select:none and dir:rtl.

[webkit-changes] [261032] trunk/Source/WebCore/ChangeLog

Title: [261032] trunk/Source/WebCore/ChangeLog Revision 261032 Author shihchieh_...@apple.com Date 2020-05-01 15:54:39 -0700 (Fri, 01 May 2020) Log Message Unreviewed, amend change log entry for r260831. * ChangeLog: Modified Paths trunk/Source/WebCore/ChangeLog Diff Modified:

[webkit-changes] [261019] trunk

Title: [261019] trunk Revision 261019 Author shihchieh_...@apple.com Date 2020-05-01 13:53:59 -0700 (Fri, 01 May 2020) Log Message Source/WebCore: Nullptr crash in CompositeEditCommand::cloneParagraphUnderNewElement when indent and align a paragraph.

[webkit-changes] [261018] trunk

Title: [261018] trunk Revision 261018 Author shihchieh_...@apple.com Date 2020-05-01 13:50:18 -0700 (Fri, 01 May 2020) Log Message Nullptr crash in EditCommand::EditCommand via CompositeEditCommand::removeNode https://bugs.webkit.org/show_bug.cgi?id=207600 Source/WebCore: Reviewed by

[webkit-changes] [260207] trunk

Title: [260207] trunk Revision 260207 Author shihchieh_...@apple.com Date 2020-04-16 11:42:36 -0700 (Thu, 16 Apr 2020) Log Message ASSERTION FAILED: candidate.isCandidate() in WebCore::canonicalizeCandidate https://bugs.webkit.org/show_bug.cgi?id=130844 Reviewed by Geoffrey Garen.

[webkit-changes] [260154] trunk/LayoutTests

Title: [260154] trunk/LayoutTests Revision 260154 Author shihchieh_...@apple.com Date 2020-04-15 15:01:51 -0700 (Wed, 15 Apr 2020) Log Message Infinite loop in InsertListCommand::doApply() https://bugs.webkit.org/show_bug.cgi?id=210354 Reviewed by Geoffrey Garen. Update the regression

[webkit-changes] [260153] trunk

Title: [260153] trunk Revision 260153 Author shihchieh_...@apple.com Date 2020-04-15 14:57:22 -0700 (Wed, 15 Apr 2020) Log Message Source/WebCore: ASSERTION FAILED: !selectionToDelete.isNone() in TypingCommand::forwardDeleteKeyPressed when deleting a UserSelect::None element.

[webkit-changes] [259939] trunk

Title: [259939] trunk Revision 259939 Author shihchieh_...@apple.com Date 2020-04-11 20:13:17 -0700 (Sat, 11 Apr 2020) Log Message Infinite loop in InsertListCommand::doApply() https://bugs.webkit.org/show_bug.cgi?id=210354 Reviewed by Darin Adler. Source/WebCore: Function

[webkit-changes] [259899] trunk

Title: [259899] trunk Revision 259899 Author shihchieh_...@apple.com Date 2020-04-10 13:44:52 -0700 (Fri, 10 Apr 2020) Log Message ASSERTION FAILED: selection.isRange() in InsertListCommand::doApply https://bugs.webkit.org/show_bug.cgi?id=210170 Reviewed by Wenson Hsieh.

[webkit-changes] [259624] trunk

Title: [259624] trunk Revision 259624 Author shihchieh_...@apple.com Date 2020-04-06 23:29:24 -0700 (Mon, 06 Apr 2020) Log Message Nullptr crash in CompositeEditCommand::splitTreeToNode when inserting image in anchor element that has uneditable parent

[webkit-changes] [259619] trunk

Title: [259619] trunk Revision 259619 Author shihchieh_...@apple.com Date 2020-04-06 18:45:56 -0700 (Mon, 06 Apr 2020) Log Message Nullptr crash in WebCore::lastPositionInNode when indenting text node that has user-select:all parent. https://bugs.webkit.org/show_bug.cgi?id=210016

[webkit-changes] [259595] trunk

Title: [259595] trunk Revision 259595 Author shihchieh_...@apple.com Date 2020-04-06 14:44:11 -0700 (Mon, 06 Apr 2020) Log Message Nullptr crash in CompositeEditCommand::moveParagraphContentsToNewBlockIfNecessary with draggable text https://bugs.webkit.org/show_bug.cgi?id=20

[webkit-changes] [259525] trunk/Source/WebCore

Title: [259525] trunk/Source/WebCore Revision 259525 Author shihchieh_...@apple.com Date 2020-04-03 18:04:42 -0700 (Fri, 03 Apr 2020) Log Message Protect contentFrame in SubframeLoader::loadOrRedirectSubframe with RefPtr. https://bugs.webkit.org/show_bug.cgi?id=127096 Reviewed by Alex

[webkit-changes] [259376] trunk/Source/WebCore

Title: [259376] trunk/Source/WebCore Revision 259376 Author shihchieh_...@apple.com Date 2020-04-01 19:31:24 -0700 (Wed, 01 Apr 2020) Log Message Remove the unnecessary null check for document https://bugs.webkit.org/show_bug.cgi?id=209819 Reviewed by Ryosuke Niwa. No new tests,

[webkit-changes] [259349] trunk/Tools

Title: [259349] trunk/Tools Revision 259349 Author shihchieh_...@apple.com Date 2020-04-01 09:18:50 -0700 (Wed, 01 Apr 2020) Log Message Unreviewed, add new committer to contributors.json * Scripts/webkitpy/common/config/contributors.json: Modified Paths trunk/Tools/ChangeLog

[webkit-changes] [259348] trunk/Source/WebCore

Title: [259348] trunk/Source/WebCore Revision 259348 Author shihchieh_...@apple.com Date 2020-04-01 09:13:01 -0700 (Wed, 01 Apr 2020) Log Message Notify accessibility when a node is removed from its ancestor. https://bugs.webkit.org/show_bug.cgi?id=209819 Reviewed by Chris Fleizach.

[webkit-changes] [259210] trunk

Title: [259210] trunk Revision 259210 Author shihchieh_...@apple.com Date 2020-03-30 10:43:22 -0700 (Mon, 30 Mar 2020) Log Message Division by zero in RenderBlockFlow::computeColumnCountAndWidth https://bugs.webkit.org/show_bug.cgi?id=209485 Reviewed by Zalan Bujtas. Source/WebCore:

[webkit-changes] [259153] trunk

Title: [259153] trunk Revision 259153 Author shihchieh_...@apple.com Date 2020-03-27 21:17:00 -0700 (Fri, 27 Mar 2020) Log Message Nullptr crash in CompositeEditCommand::moveParagraphs when inserting OL into uneditable parent. https://bugs.webkit.org/show_bug.cgi?id=209641 Reviewed by

[webkit-changes] [259027] trunk

Title: [259027] trunk Revision 259027 Author shihchieh_...@apple.com Date 2020-03-25 18:51:14 -0700 (Wed, 25 Mar 2020) Log Message Nullptr crash in WebCore::Node::isDescendantOf when inserting list https://bugs.webkit.org/show_bug.cgi?id=209529 Reviewed by Darin Adler. Source/WebCore: