[Webkit-unassigned] [Bug 258135] REGRESSION(264701 at main): wpt/css/CSS2/normal-flow/crashtests/block-in-inline-ax-crash.html

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=258135

--- Comment #3 from Chris Dumez <cdumez at apple.com> ---
Exceptions thrown by Firefox:
```
Uncaught TypeError: oRange is null
    event_handler_ECA_DOMCharacterDataModified http://wpt.live/css/CSS2/normal-flow/crashtests/block-in-inline-ax-crash.html:50
    event_handler_EC9_load http://wpt.live/css/CSS2/normal-flow/crashtests/block-in-inline-ax-crash.html:20
block-in-inline-ax-crash.html:50:25
Uncaught TypeError: oRange is null
    event_handler_EC9_load http://wpt.live/css/CSS2/normal-flow/crashtests/block-in-inline-ax-crash.html:31
block-in-inline-ax-crash.html:31:1
Uncaught DOMException: Node.insertBefore: The new child is an ancestor of the parent
    <anonymous> http://wpt.live/css/CSS2/normal-flow/crashtests/block-in-inline-ax-crash.html:127
block-in-inline-ax-crash.html:127
```

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20230615/d7841975/attachment.htm>