| Index: Source/WebCore/editing/ReplaceSelectionCommand.cpp
|
| ===================================================================
|
| --- Source/WebCore/editing/ReplaceSelectionCommand.cpp (revision 94878)
|
| +++ Source/WebCore/editing/ReplaceSelectionCommand.cpp (working copy)
|
| @@ -994,7 +994,7 @@
|
|
|
| Node* blockStart = enclosingBlock(insertionPos.deprecatedNode());
|
| if ((isListElement(refNode.get()) || (isLegacyAppleStyleSpan(refNode.get()) && isListElement(refNode->firstChild())))
|
| - && blockStart->renderer()->isListItem())
|
| + && blockStart && blockStart->renderer()->isListItem())
|
| refNode = insertAsListItems(refNode, blockStart, insertionPos);
|
| else
|
| insertNodeAtAndUpdateNodesInserted(refNode, insertionPos);
|
|
|