[Webkit-unassigned] [Bug 38232] REGRESSION: crash in WebCore::CompositeEditCommand::splitTreeToNode when indenting in an empty li

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=38232





--- Comment #3 from Ojan Vafai <ojan at chromium.org>  2010-04-28 07:47:24 PST ---
(From update of attachment 54522)
The code changes look correct to me.

> +++ b/LayoutTests/editing/execCommand/crash-indenting-list-item.html
> @@ -0,0 +1,9 @@
> +<div contentEditable><ul><li id='foo'></li></ul></div>
> +<script>
> +if (window.layoutTestController)
> +    layoutTestController.dumpAsText();
> +window.getSelection().setBaseAndExtent(foo, 0, foo, 0);
> +// This test passes if it does not crash.
> +document.execCommand('indent', false, null);
> +document.getElementById("foo").innerText = "PASSED";
> +</script>

We now have dump-as-markup that's perfect for something like this. Ideally this
test would also show that the li got indented (which dump-as-markup would
show). All you need to do to make this work with dump-as-markup is add the
following to the top of the file:
<script src="../../resources/dump-as-markup.js"></script>

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.