New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 708931 link

Starred by 3 users

Issue metadata

Status: Available
Owner: ----
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Windows
Pri: 3
Type: Bug-Regression



Sign in to add a comment

Tab hangs infinitely when pressing page down on a certain position in a contentEditable element

Reported by martin.m...@liones.nl, Apr 6 2017

Issue description

UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.14 Safari/537.36

Steps to reproduce the problem:
1. Open attached file
2. Place cursor anywhere in the content editable div
3. Press the home key to place the cursor at the start
4. Press the page down key.

What is the expected behavior?
Pressing page down moves the caret to the end.

What went wrong?
The browser tab is now hanging, wait a few seconds for the 'tab unresponsive' message.

Did this work before? N/A 

Does this work in other browsers? N/A

Chrome version: 58.0.3029.14  Channel: dev
OS Version: Ubuntu 14.04
Flash Version: 

This has been reproduced on both Linux and Windows. OSX does not suffer from this problem.

The <chrome-selection-repro> element is styled oddly to work around a selection displaying issue seen in some browsers. If I make it self-closing, I can not reproduce this issue.
 
repro.html
458 bytes View Download
Labels: Needs-Triage-M58
Components: Blink>Editing>Content
Labels: -Pri-2 Needs-Bisect M-58 OS-Windows Pri-1
Status: Untriaged (was: Unconfirmed)
I have reproduced. To do so, use the arrow keys to place the cursor on the non-visible <chrome-selection-repro> element just before "Place caret here". The cursor will appear on a line below the other text. Then do the Home and Page Down key presses and you get the hang.
Labels: -Type-Bug Type-Bug-Regression
Can't repro in M57, but repro in M59 ToT.
Cc: hdodda@chromium.org
Labels: -Needs-Bisect -M-58 -Needs-Triage-M58 M-59
Tested the issue on windows 7 and ubuntu 14.04 using chrome M59 #59.0.3064.0 and issue is reproduced.

Issue is seen from M51 and from M30 issue behavior is different , no crash or unresponsive message is seen .. but on page down key press the cursor is not moved to the end of the caret. The same happens in firefox.

Attached screencast for reference.

Thanks!

708931.mp4
1.3 MB View Download

Comment 5 by yosin@chromium.org, Apr 10 2017

Status: Available (was: Untriaged)
I could reproduce...

Comment 6 by yosin@chromium.org, Apr 27 2017

Labels: -M-59
Labels: -Pri-1 Pri-2
Deprioritized to P2 due to low severity.

When passed the position before "💬", NextLinePosition returns chrome-selection-repro@0
When passed chrome-selection-repro@0, NextLinePosition returns the position before "💬"

So the for loop in SelectionModifier::ModifyWithPageGranularity never ends:

for (p = pos; ; p = next) {
  next = NextLinePosition(p);
  ...
}

Comment 8 by yosin@chromium.org, Oct 4 2017

Labels: Pri-3
Project Member

Comment 9 by sheriffbot@chromium.org, Oct 4

Labels: Hotlist-Recharge-Cold
Status: Untriaged (was: Available)
This issue has been Available for over a year. If it's no longer important or seems unlikely to be fixed, please consider closing it out. If it is important, please re-triage the issue.

Sorry for the inconvenience if the bug really should have been left as Available.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Status: Available (was: Untriaged)

Sign in to add a comment