Fix crash when trying to iterate over words in an inline text box of length zero.

Source/core/rendering/AbstractInlineTextBox.cpp

 /*
  * Copyright (C) 2013 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 113 matching lines @@
     m_inlineTextBox->characterWidths(widths);
 }
 
 void AbstractInlineTextBox::wordBoundaries(Vector<WordBoundaries>& words) const
 {
     if (!m_inlineTextBox)
         return;
 
     String text = this->text();
     int len = text.length();
+    if (!len)

[eseidel, 2014/09/04 16:39:49]

Should this be moved to after wordBreakIterator if (iterator) instead?

[dmazzoni, 2014/09/04 16:46:57]

Sure. I was torn between catching the actual crash (null iterator) or the
underlying reason behind it (len == 0). I switched it to check the iterator but
added a comment so we know there's a reason why it might happen.

+        return;
+
     TextBreakIterator* iterator = wordBreakIterator(text, 0, len);
     int pos = iterator->first();
     while (pos >= 0 && pos < len) {
         int next = iterator->next();
         if (isWordTextBreak(iterator))
             words.append(WordBoundaries(pos, next));
         pos = next;
     }
 }
 
@@ skipping 11 matching lines @@
         return plainText(range.get(), TextIteratorIgnoresStyleVisibility);
     }
 
     String result = m_renderText->text().substring(start, len).simplifyWhiteSpace(WTF::DoNotStripWhiteSpace);
     if (m_inlineTextBox->nextTextBox() && m_inlineTextBox->nextTextBox()->start() > m_inlineTextBox->end() && result.length() && !result.right(1).containsOnlyWhitespace())
         return result + " ";
     return result;
 }
 
 } // namespace blink