| Index: Source/core/editing/MoveSelectionCommand.cpp
|
| diff --git a/Source/core/editing/MoveSelectionCommand.cpp b/Source/core/editing/MoveSelectionCommand.cpp
|
| index 5d70c5099065ec6ba3dcafd81158d83e078a3e95..7d45d37106b20914baf7c4e5244b0b4eeddf6495 100644
|
| --- a/Source/core/editing/MoveSelectionCommand.cpp
|
| +++ b/Source/core/editing/MoveSelectionCommand.cpp
|
| @@ -62,13 +62,13 @@ void MoveSelectionCommand::doApply()
|
| // set the destination to the ending point after the deletion.
|
| // Fixes: <rdar://problem/3910425> REGRESSION (Mail): Crash in ReplaceSelectionCommand;
|
| // selection is empty, leading to null deref
|
| - if (!pos.anchorNode()->inDocument())
|
| + if (!pos.inDocument())
|
| pos = endingSelection().start();
|
|
|
| cleanupAfterDeletion(pos);
|
|
|
| setEndingSelection(VisibleSelection(pos, endingSelection().affinity(), endingSelection().isDirectional()));
|
| - if (!pos.anchorNode()->inDocument()) {
|
| + if (!pos.inDocument()) {
|
| // Document was modified out from under us.
|
| return;
|
| }
|
|
|