The length of a TextIterator containing replaced element is at least 1

Source/core/editing/TextIterator.cpp

Index: Source/core/editing/TextIterator.cpp
diff --git a/Source/core/editing/TextIterator.cpp b/Source/core/editing/TextIterator.cpp
index 45a5f213b3a52a91642d61b585c07bc17b29ca7a..1d1779f2fa96cf10f00294d6b94ad1a80eba5d68 100644
--- a/Source/core/editing/TextIterator.cpp
+++ b/Source/core/editing/TextIterator.cpp
@@ -356,6 +356,16 @@ TextIterator::~TextIterator()
 {
 }
 
+bool TextIterator::isInsideReplacedElement()
+{
+    ASSERT(!atEnd());
+    ASSERT(length() == 1);
+    if (!m_node)
+        return false;
+    RenderObject* renderer = m_node->renderer();
+    return renderer && renderer->isReplaced();
+}
+
 void TextIterator::advance()
 {
     if (m_shouldStop)