View All Attachments for Bug 49315

Attachment #73482
Repro for crash 1	text/html	2010-11-10 03:49:35 PST	1.19 KB	no flags	Details

<html>
  <head>
    <script>
      function go() {
        document.designMode= "on";
        document.execCommand("selectall", false, "eory");
        document.execCommand("italic", false);
        document.execCommand("InsertOrderedList", false, "Tue");
        document.execCommand("inserthorizontalrule", false, "966BF0");
        document.execCommand("InsertOrderedList", false, true);
        document.execCommand("insertimage", false, NaN);
        document.execCommand("insertorderedlist", false, Infinity);
        document.execCommand("outdent", false, "chroextEEExxWWWWWWWWWWWWWRRRR444444444");
        document.execCommand("createlink", false, true);
        document.execCommand("indent", false, "ht//examWWWWWWWWWWWWWWWWWWWWWWWWWW3333333333");
        document.execCommand("InsertNewlineInQuotedContent", false);
        document.execCommand("delete", false, "-0x00003");
        document.execCommand("InsertParagraph", false);
        document.execCommand("outdent", false, "ps:xample.com");
        document.execCommand("outdent", false, "ps:xample.com");
        location.reload();
      }
    </script>
  </head>
  <body onload="go()">
    <pre style="white-space: pre-wrap;">x</pre>
  </body>
</html>

Attachment #73483
Repro for crash 2 (infinite loop)	text/html	2010-11-10 03:52:52 PST	1.18 KB	no flags	Details

<html>
  <head>
    <script>
      function go() {
        document.designMode= "on";
        document.execCommand("selectall", false, "eory");
        document.execCommand("italic", false);
        document.execCommand("InsertOrderedList", false, "Tue");
        document.execCommand("inserthorizontalrule", false, "966BF0");
        document.execCommand("InsertOrderedList", false, true);
        document.execCommand("insertimage", false, NaN);
        document.execCommand("insertorderedlist", false, Infinity);
        document.execCommand("outdent", false, "chroextEEExxWWWWWWWWWWWWWRRRR444444444");
        document.execCommand("createlink", false, true);
        document.execCommand("indent", false, "ht//examWWWWWWWWWWWWWWWWWWWWWWWWWW3333333333");
        document.execCommand("InsertNewlineInQuotedContent", false);
        document.execCommand("delete", false, "-0x00003");
        document.execCommand("InsertParagraph", false);
        document.execCommand("outdent", false, "ps:xample.com");
        document.execCommand("outdent", false, "ps:xample.com");
        location.reload();
      }
    </script>
  </head>
  <body onload="go()" style="white-space: pre-wrap;">
    x
  </body>
</html>

Attachment #73511
reduction	text/html	2010-11-10 11:01:27 PST	1.71 KB	no flags	Details

<html> 
<head> 
<script> 
  function go() {
    document.designMode= "on";
    window.getSelection().setPosition(document.getElementsByTagName('a')[0].firstChild, 0);
    document.execCommand("InsertOrderedList", false, false);
/*    document.execCommand("selectall", false, "eory");
    document.execCommand("italic", false);
    document.execCommand("InsertOrderedList", false, "Tue");
    document.execCommand("inserthorizontalrule", false, "966BF0");
    document.execCommand("InsertOrderedList", false, true);
    document.execCommand("insertimage", false, NaN);
    document.execCommand("insertorderedlist", false, Infinity);
    document.execCommand("outdent", false, "chroextEEExxWWWWWWWWWWWWWRRRR444444444");
    document.execCommand("createlink", false, true);
    document.execCommand("indent", false, "ht//examWWWWWWWWWWWWWWWWWWWWWWWWWW3333333333");
    document.execCommand("InsertNewlineInQuotedContent", false);
    document.execCommand("delete", false, "-0x00003");
    document.execCommand("InsertParagraph", false);
    document.execCommand("outdent", false, "ps:xample.com");
    document.execCommand("outdent", false, "ps:xample.com");
    location.reload();*/
  }
</script> 
</head>
<body onload="go()" style="white-space: pre-wrap;"
><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"
    ><span class="Apple-style-span" style="white-space: pre-wrap;"><i><span class="Apple-style-span" style="font-style: normal;"
        ><i><ol style="display: inline !important;"><li style="display: inline !important;"
            ><span class="Apple-style-span" style="font-style: normal;"><i><a>e</a></i></span
        ></li></ol></i
    ></span></i></span></blockquote></body> 
</html>