Selection API: deleteFromDocument() should not call setBaseAndExtent().

third_party/WebKit/Source/core/editing/DOMSelection.cpp

 /*
  * Copyright (C) 2007, 2009 Apple Inc. All rights reserved.
  * Copyright (C) 2012 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  *
  * 1.  Redistributions of source code must retain the above copyright
  *     notice, this list of conditions and the following disclaimer.
@@ skipping 654 matching lines @@
   // needs to be audited.  See http://crbug.com/590369 for more details.
   // |VisibleSelection::toNormalizedEphemeralRange| requires clean layout.
   frame()->document()->updateStyleAndLayoutIgnorePendingStylesheets();
 
   Range* selectedRange =
       createRange(selection.computeVisibleSelectionInDOMTreeDeprecated()
                       .toNormalizedEphemeralRange());
   if (!selectedRange)
     return;
 
+  // |selectedRange| may point nodes in a different root.
   selectedRange->deleteContents(ASSERT_NO_EXCEPTION);
-
-  setBaseAndExtent(selectedRange->startContainer(),
-                   selectedRange->startOffset(),
-                   selectedRange->startContainer(),
-                   selectedRange->startOffset(), ASSERT_NO_EXCEPTION);
 }
 
 bool DOMSelection::containsNode(const Node* n, bool allowPartial) const {
   DCHECK(n);
 
   if (!isAvailable())
     return false;
 
   if (frame()->document() != n->document())
     return false;
@@ skipping 122 matching lines @@
     m_treeScope->document().addConsoleMessage(
         ConsoleMessage::create(JSMessageSource, ErrorMessageLevel, message));
 }
 
 DEFINE_TRACE(DOMSelection) {
   visitor->trace(m_treeScope);
   ContextClient::trace(visitor);
 }
 
 }  // namespace blink