[Webkit-unassigned] [Bug 20298] New: NULL pointer crash triggered by execCommand

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Aug 6 05:30:00 PDT 2008


https://bugs.webkit.org/show_bug.cgi?id=20298

           Summary: NULL pointer crash triggered by execCommand
           Product: WebKit
           Version: 525.x (Safari 3.1)
          Platform: PC
               URL: http://skypher.com/SkyLined/Repro/Safari/AccessViolation
                    Read%5B18%5D at WebKit+2e33e2%20%23a68321a8/repro.html
        OS/Version: Windows Vista
            Status: NEW
          Severity: Critical
          Priority: P2
         Component: New Bugs
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: berendjanwever at gmail.com


A NULL pointer is triggered by loading the follow HTML:
<BODY></BODY>
<SCRIPT>
        document.execCommand('SelectAll');
        document.designMode = 'on';
        document.execCommand('insertparagraph');
        document.execCommand('JustifyNone');
        document.execCommand('InsertOrderedList');
        document.execCommand('InsertHTML', false, '<tr>')
        document.execCommand('indent');
        setTimeout(function () {
                document.execCommand('inserthorizontalrule');
                document.execCommand('undo');
                document.execCommand('selectall');
                document.execCommand('RemoveFormat');
        }, 1);
</SCRIPT>


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list