Bug 76256 – NULL ptr in WebCore::VisibleSelection::firstRange

• Component: HTML Editing
• Status: NEW

[Berend-Jan Wever]

Created attachment 122392 [details]
Repro

Chromium: http://code.google.com/p/chromium/issues/detail?id=110145
Repro:

<script type="text/javascript">
  (_=window.layoutTestController) && _.waitUntilDone();
  window.onload=function(){
    document.execCommand("SelectAll", false);
    document.designMode="on";
    document.execCommand("JustifyCenter");
    _ && _.notifyDone();
  };
  document.addEventListener("DOMNodeRemoved",function(){
    document.execCommand("strikethrough");
    document.execCommand("outdent", false);
  },true);
  document.addEventListener("DOMSubtreeModified",function(){
    document.execCommand("indent", false);
    document.execCommand("StrikeThrough");
    document.execCommand("Undo");
  },true);
</script>

x
<textarea>

[Ahmad Saleem]

It hangs in Safari 17 and Debug build does not show any failure etc. as well.