large value= attributes in alphabetic list markers cause crash
This was reported via:
This was due to our bogus handling of value= arguments in alphabetical lists. I fixed our behavior to match WinIE, but not FireFox (since they differed).
Created attachment 7919 [details]
Comment on attachment 7919 [details]
r=me, but let's get a test with a bunch of list items that cycles through the alphabet a few times. We want to have one that records our behavior there I think.
Actually, this patch isn't 100% correct. it seems to get Z wrong. I'll tweak it tomorrow, adding an additional layout test and land.
<rdar://problem/4523889> <li value=1234567890 type=A> causes crash