[Webkit-unassigned] [Bug 77076] NULL ptr in WebCore::firstPositionInNode

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Jan 26 01:05:23 PST 2012


https://bugs.webkit.org/show_bug.cgi?id=77076





--- Comment #1 from Berend-Jan Wever <skylined at chromium.org>  2012-01-26 01:05:23 PST ---
A similar repro triggers a crash in lastPositionInNode, so I believe it to be a variation:

<script>
  function main(){
    document.designMode="on";/*exec*/
    document.execCommand("ForwardDelete");/*exec*/
    document.execCommand("Indent", false);/*js_om*/
  }
</script>

<script type="text/javascript">
  document.addEventListener("DOMCharacterDataModified",main,true);
  setInterval(main, 100);
</script>
<plaintext class="class1"</plaintext>
<input class="class3" id="id_684" type="button"

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list