Bug 34568
| Summary: | 2x execCommand ReadAV@NULL | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Berend-Jan Wever <skylined> |
| Component: | HTML Editing | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED DUPLICATE | ||
| Severity: | Normal | CC: | eric, joepeck |
| Priority: | P1 | ||
| Version: | 528+ (Nightly build) | ||
| Hardware: | PC | ||
| OS: | Windows Vista | ||
Berend-Jan Wever
Repro:
<BODY></BODY>
<SCRIPT>
document.designMode = "on";
document.execCommand("selectall");
document.execCommand("InsertLineBreak");
document.execCommand("InsertLineBreak");
document.execCommand("forecolor", false, 1); // Optional, see note
document.execCommand("InsertText", false, 1);
document.execCommand("SelectAll");
document.execCommand("createlink", false, 1);
document.execCommand("justifycenter", false);
</SCRIPT>
The "forecolor" line is optional: there are two different crashes that can
happen, one with it and one without (latest non-debug build of Chromium):
WebCore::Node::shadowAncestorNode ReadAV@NULL
(3b90161564d80c611251f74d8780bd91)
WebCore::CSSStyleDeclaration::diff ReadAV@NULL
(2b02a76b8ac89beb9292332299f74c09)
Both repro's trigger ASSERTs in debug builds. Details and repros are attached to the chromium bug:
http://code.google.com/p/chromium/issues/detail?id=34575
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Joseph Pecoraro
*** This bug has been marked as a duplicate of bug 35791 ***