Title: [90858] branches/chromium/782
- Revision
- 90858
- Author
- [email protected]
- Date
- 2011-07-12 15:14:47 -0700 (Tue, 12 Jul 2011)
Log Message
Merge 89831
BUG=87298
Review URL: http://codereview.chromium.org/7350003
Modified Paths
Added Paths
Diff
Copied: branches/chromium/782/LayoutTests/editing/text-iterator/first-letter-rtl-crash-expected.txt (from rev 89831, trunk/LayoutTests/editing/text-iterator/first-letter-rtl-crash-expected.txt) (0 => 90858)
--- branches/chromium/782/LayoutTests/editing/text-iterator/first-letter-rtl-crash-expected.txt (rev 0)
+++ branches/chromium/782/LayoutTests/editing/text-iterator/first-letter-rtl-crash-expected.txt 2011-07-12 22:14:47 UTC (rev 90858)
@@ -0,0 +1,3 @@
+
+This test ensures WebKit does not crash when first-letter rule is applied to LTR letters that are not visually contiguous to each other.
+PASS
Copied: branches/chromium/782/LayoutTests/editing/text-iterator/first-letter-rtl-crash.html (from rev 89831, trunk/LayoutTests/editing/text-iterator/first-letter-rtl-crash.html) (0 => 90858)
--- branches/chromium/782/LayoutTests/editing/text-iterator/first-letter-rtl-crash.html (rev 0)
+++ branches/chromium/782/LayoutTests/editing/text-iterator/first-letter-rtl-crash.html 2011-07-12 22:14:47 UTC (rev 90858)
@@ -0,0 +1,17 @@
+<!DOCTYPE html>
+<html>
+<style>
+body:first-letter { color: black; }
+</style>
+<script>
+
+function run() {
+ document.execCommand('findString', false, '!ABC');
+ document.body.innerHTML = '<br>This test ensures WebKit does not crash when first-letter rule is applied to LTR letters that ' +
+ ' are not visually contiguous to each other.<br>PASS';
+ if (window.layoutTestController)
+ layoutTestController.dumpAsText();
+}
+
+</script>
+<body style="direction: rtl;" _onload_="run()">!ABC‮</body>
Modified: branches/chromium/782/Source/WebCore/editing/TextIterator.cpp (90857 => 90858)
--- branches/chromium/782/Source/WebCore/editing/TextIterator.cpp 2011-07-12 22:07:21 UTC (rev 90857)
+++ branches/chromium/782/Source/WebCore/editing/TextIterator.cpp 2011-07-12 22:14:47 UTC (rev 90858)
@@ -459,7 +459,7 @@
emitCharacter(' ', m_node, 0, runStart, runStart);
return false;
}
- if (!m_handledFirstLetter && renderer->isTextFragment()) {
+ if (!m_handledFirstLetter && renderer->isTextFragment() && !m_offset) {
handleTextNodeFirstLetter(static_cast<RenderTextFragment*>(renderer));
if (m_firstLetterText) {
String firstLetter = m_firstLetterText->text();
@@ -496,6 +496,14 @@
return true;
}
+
+ m_textBox = renderer->firstTextBox();
+ if (!m_handledFirstLetter && renderer->isTextFragment() && !m_offset)
+ handleTextNodeFirstLetter(static_cast<RenderTextFragment*>(renderer));
+
+ if (m_firstLetterText)
+ renderer = m_firstLetterText;
+
// Used when text boxes are out of order (Hebrew/Arabic w/ embeded LTR text)
if (renderer->containsReversedText()) {
m_sortedTextBoxes.clear();
@@ -504,11 +512,9 @@
}
std::sort(m_sortedTextBoxes.begin(), m_sortedTextBoxes.end(), InlineTextBox::compareByStart);
m_sortedTextBoxesPosition = 0;
+ m_textBox = m_sortedTextBoxes.isEmpty() ? 0 : m_sortedTextBoxes[0];
}
-
- m_textBox = renderer->containsReversedText() ? (m_sortedTextBoxes.isEmpty() ? 0 : m_sortedTextBoxes[0]) : renderer->firstTextBox();
- if (!m_handledFirstLetter && renderer->isTextFragment() && !m_offset)
- handleTextNodeFirstLetter(static_cast<RenderTextFragment*>(renderer));
+
handleTextBox();
return true;
}
@@ -975,6 +981,9 @@
RenderText* renderer = toRenderText(renderObject);
m_text = m_emitsTextWithoutTranscoding ? renderer->textWithoutTranscoding() : renderer->text();
ASSERT(m_text.characters());
+ ASSERT(0 <= textStartOffset && textStartOffset < static_cast<int>(m_text.length()));
+ ASSERT(0 <= textEndOffset && textEndOffset <= static_cast<int>(m_text.length()));
+ ASSERT(textStartOffset <= textEndOffset);
m_positionNode = textNode;
m_positionOffsetBaseNode = 0;
_______________________________________________
webkit-changes mailing list
[email protected]
http://lists.webkit.org/mailman/listinfo.cgi/webkit-changes
