[Webkit-unassigned] [Bug 20298] New: NULL pointer crash triggered by execCommand
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Wed Aug 6 05:30:00 PDT 2008
https://bugs.webkit.org/show_bug.cgi?id=20298
Summary: NULL pointer crash triggered by execCommand
Product: WebKit
Version: 525.x (Safari 3.1)
Platform: PC
URL: http://skypher.com/SkyLined/Repro/Safari/AccessViolation
Read%5B18%5D at WebKit+2e33e2%20%23a68321a8/repro.html
OS/Version: Windows Vista
Status: NEW
Severity: Critical
Priority: P2
Component: New Bugs
AssignedTo: webkit-unassigned at lists.webkit.org
ReportedBy: berendjanwever at gmail.com
A NULL pointer is triggered by loading the follow HTML:
<BODY></BODY>
<SCRIPT>
document.execCommand('SelectAll');
document.designMode = 'on';
document.execCommand('insertparagraph');
document.execCommand('JustifyNone');
document.execCommand('InsertOrderedList');
document.execCommand('InsertHTML', false, '<tr>')
document.execCommand('indent');
setTimeout(function () {
document.execCommand('inserthorizontalrule');
document.execCommand('undo');
document.execCommand('selectall');
document.execCommand('RemoveFormat');
}, 1);
</SCRIPT>
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
More information about the webkit-unassigned
mailing list