[Webkit-unassigned] [Bug 32131] New: WebCore::canHaveChildrenForEditing ReadAV at NULL (cd05b3b20e0f4c6b3afe5d165a1798aa)

Thu Dec 3 13:05:25 PST 2009

https://bugs.webkit.org/show_bug.cgi?id=32131

           Summary: WebCore::canHaveChildrenForEditing ReadAV at NULL
                    (cd05b3b20e0f4c6b3afe5d165a1798aa)
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Windows Vista
            Status: NEW
          Severity: Normal
          Priority: P1
         Component: HTML Editing
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: skylined at chromium.org
                CC: eric at webkit.org

Created an attachment (id=44266)
 --> (https://bugs.webkit.org/attachment.cgi?id=44266)
Repro

The following HTML causes a NULL pointer read access violation exception in
WebCore::canHaveChildrenForEditing:

<BODY></BODY>
<SCRIPT>
  document.execCommand("SelectAll");
  document.designMode = "on";
  document.execCommand("underline");
  document.execCommand("InsertUnorderedList");
  document.execCommand("InsertImage");
  document.execCommand("InsertLineBreak");
  document.execCommand("InsertText", false, 34359738365);
  document.execCommand("JustifyRight");
  document.execCommand("Outdent");
  document.execCommand("insertunorderedlist");
  document.execCommand("JustifyCenter");
  document.execCommand("selectall");
  document.execCommand("insertorderedlist");
</SCRIPT>

Relevant call stack:
 WebCore::canHaveChildrenForEditing
 WebCore::CompositeEditCommand::insertNodeAt
 WebCore::InsertListCommand::doApply
 WebCore::InsertListCommand::modifyRange
 WebCore::InsertListCommand::doApply
 WebCore::EditCommand::apply
 WebCore::applyCommand
 WebCore::executeInsertOrderedList
 WebCore::Editor::Command::execute
 WebCore::Document::execCommand
 WebCore::DocumentInternal::execCommandCallback

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.