32425 2009-12-11 04:57:27 -0800 WebCore::executeToggleStyleInList ReadAV@NULL (08a7de8db480c4e2b2ae552176cb3df1) 2009-12-31 02:32:19 -0800 1 1 1 Unclassified WebKit HTML Editing 528+ (Nightly build) PC Windows Vista RESOLVED DUPLICATE 32823 http://skypher.com/SkyLined/Repro/WebKit/Bug%2032425%20-%20WebCore..executeToggleStyleInList%20ReadAV@NULL%20(08a7de8db480c4e2b2ae552176cb3df1)/repro.html P1 Normal --- 1 skylined webkit-unassigned enrica eric oldest_to_newest 170700 0 44675 skylined 2009-12-11 04:57:27 -0800 Created attachment 44675 Repro Id: WebCore::executeToggleStyleInList ReadAV@NULL (08a7de8db480c4e2b2ae552176cb3df1) Description: Attempt to read from NULL pointer in WebCore::executeToggleStyleInList Stack: WebCore::executeToggleStyleInList WebCore::executeStrikethrough WebCore::Editor::Command::execute WebCore::Document::execCommand WebCore::DocumentInternal::execCommandCallback v8::internal::Builtin_HandleApiCall v8::internal::Invoke v8::internal::Execution::Call v8::Script::Run WebCore::V8Proxy::runScript WebCore::V8Proxy::evaluate WebCore::ScriptController::evaluate WebCore::ScriptController::executeScript WebCore::ScriptController::executeScript WebCore::ScriptController::executeIfJavaScriptURL WebCore::FrameLoader::changeLocation WebCore::RedirectScheduler::timerFired WebCore::Timer<...>::fired WebCore::ThreadTimers::sharedTimerFiredInternal MessageLoop::RunTask MessageLoop::DoWork base::MessagePumpDefault::Run MessageLoop::RunInternal MessageLoop::Run RendererMain ChromeMain Repro: <BODY></BODY> <SCRIPT> document.execCommand("selectall",false,2); document.designMode="on"; document.execCommand("InsertHorizontalRule",false,""); document.execCommand("Delete",false,""); document.designMode=""; document.execCommand("undo",false,""); document.designMode ="on"; document.execCommand("strikethrough",false,false); </SCRIPT> 170704 1 skylined 2009-12-11 04:59:54 -0800 Online repro 170823 2 enrica 2009-12-11 10:31:45 -0800 I cannot reproduce this with Safari for Mac. 176163 3 skylined 2009-12-31 02:32:19 -0800 Mike Moretti claims there is a problem with "Undo" after "designmode off". https://bugs.webkit.org/show_bug.cgi?id=32822 I am assuming this is a variation of that problem. *** This bug has been marked as a duplicate of bug 32823 *** 44675 2009-12-11 04:57:27 -0800 2009-12-11 04:57:27 -0800 Repro repro.html text/html 354 skylined PEJPRFk+PC9CT0RZPgo8U0NSSVBUPgogIGRvY3VtZW50LmV4ZWNDb21tYW5kKCJzZWxlY3RhbGwi LGZhbHNlLDIpOwogIGRvY3VtZW50LmRlc2lnbk1vZGU9Im9uIjsKICBkb2N1bWVudC5leGVjQ29t bWFuZCgiSW5zZXJ0SG9yaXpvbnRhbFJ1bGUiLGZhbHNlLCIiKTsKICBkb2N1bWVudC5leGVjQ29t bWFuZCgiRGVsZXRlIixmYWxzZSwiIik7CiAgZG9jdW1lbnQuZGVzaWduTW9kZT0iIjsKICBkb2N1 bWVudC5leGVjQ29tbWFuZCgidW5kbyIsZmFsc2UsIiIpOwogIGRvY3VtZW50LmRlc2lnbk1vZGUg PSJvbiI7CiAgZG9jdW1lbnQuZXhlY0NvbW1hbmQoInN0cmlrZXRocm91Z2giLGZhbHNlLGZhbHNl KTsKPC9TQ1JJUFQ+