accessibility/native-text-control-attributed-string.html When the test invokes textField.attributedStringForRange(), it uses the attributes' start and end offsets to show the substring related to these attributes. But during the calculation of the endOffset, it returns early with 0 from inside HTMLTextFormControlElement::indexForVisiblePosition. There the check for `!innerText->contains(position.deepEquivalent().anchorNode())` fails. This causes attributedStringForRange() to loop infinitely over the same indexes (or loop wrongly, if the location given to it is different from zero).
<rdar://problem/90230256>
<rdar://problem/90230336>