[Webkit-unassigned] [Bug 209529] Nullptr crash in WebCore::Node::isDescendantOf when inserting list

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=209529

--- Comment #10 from Ryosuke Niwa <rniwa at webkit.org> ---
Comment on attachment 394466
  --> https://bugs.webkit.org/attachment.cgi?id=394466
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=394466&action=review

> LayoutTests/ChangeLog:12
> +        * fast/lists/insert-list-during-node-removal-crash-expected.txt: Added.
> +        * fast/lists/insert-list-during-node-removal-crash.html: Added.

Oops, sorry, I didn't realize this earlier.
This should be inside editing/execCommand or editing/inserting, not fast/lists.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200325/18650675/attachment.htm>