| Index: Source/core/paint/InlineTextBoxPainter.cpp
|
| diff --git a/Source/core/paint/InlineTextBoxPainter.cpp b/Source/core/paint/InlineTextBoxPainter.cpp
|
| index 46aade4bc2ae482e2eb364587141fe841589b723..80a801ab7cba1a72ec3ad2fae4829468a0a2c73d 100644
|
| --- a/Source/core/paint/InlineTextBoxPainter.cpp
|
| +++ b/Source/core/paint/InlineTextBoxPainter.cpp
|
| @@ -149,6 +149,7 @@ void InlineTextBoxPainter::paint(const PaintInfo& paintInfo, const LayoutPoint&
|
| StringView string;
|
| if (!combinedText) {
|
| string = m_inlineTextBox.renderer().text().createView();
|
| + ASSERT(m_inlineTextBox.start() + length <= string.length());
|
| if (static_cast<unsigned>(length) != string.length() || m_inlineTextBox.start())
|
| string.narrow(m_inlineTextBox.start(), length);
|
| maximumLength = m_inlineTextBox.renderer().textLength() - m_inlineTextBox.start();
|
|
|