[Webkit-unassigned] [Bug 67668] Crashes in WebCore::EditCommand::apply(), DeleteSelectionCommand::doApply()

Tue Sep 6 13:31:11 PDT 2011

https://bugs.webkit.org/show_bug.cgi?id=67668


--- Comment #1 from Abhishek Arya <inferno at chromium.org>  2011-09-06 13:31:11 PST ---
testcase4:: [WebCore::ApplyStyleCommand::doApply()]
<card id="edit" contentEditable="true">A<script>
edit.focus();
document.execCommand("SelectAll");
document.execCommand("RemoveFormat");
</script>

testcase5:: [WebCore::ApplyStyleCommand::applyBlockStyle(WebCore::EditingStyle*) ]
<mfrac id="div" contenteditable="true">≌<script>

div.focus();
document.execCommand("SelectAll");
document.execCommand("RemoveFormat");

</script>

testcase6:: [WebCore::AppendNodeCommand::create(WTF::PassRefPtr<WebCore::ContainerNode>, WTF::PassRefPtr<WebCore::Node>) ]
<script>
        function runTest() 
        {
            window.getSelection().setBaseAndExtent(start, 0, null, 0);
            document.execCommand("Indent");
        }
    </script>
<meta content="2"/><body onLoad="runTest();">
        ><defs contenteditable="true" id="start">
            <rt>AAAAAAA0A0AAAA00

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.