65789 - paste of table cells crashes

Status: VERIFIED FIXED

(Core :: DOM: Editor, defect, P1)

Description

[anthonyd]

selecting multiple cells, copying them, and then pasting them in crashes 
mozilla.

inside nsHTMLEditor::CreateDOMFragmentFromPaste(...) where the outRangeStartHint 
and outRangeEndHint are filled, are being filled with erronous info.

After investigating, it appears the hints are always off by 1 (but that is not 
100% certain).

After further investigating, it appears that infoDataObj (where the hints are 
eventually parsed from) which is filled with information form the clipboard is 
getting the wrong information, so it would appear the copy is puuting the 
incorrect information (child node depth?) up onto the clipboard.

over to joe.

anthonyd

Comment 1

[Charles Manske]

This is the most reproduceable case:
1. Create a 2x2 table in Composer (don't need any content in them).
2. Ctrl(Cmd)+Click on the lower-right-most cell in table.
3. Ctrl(Cmd)+Click on the upper-right-most cell in table.
4. Copy the selected cells.
5. Put caret outside the table and paste.

Comment 2

[Joe Francis]

accepting bug.  There is a waft of chqnges needed to tbel cell copying that 
should fix this.

Comment 3

[Kathleen :Brade]

adding bug that is probably blocked by this crasher

Comment 4

[Joe Francis]

fixed a while ago - forgot to mark fixed

Comment 5

[sujay]

verified in 4/6 build.