Attachment 348337 Details for Bug 184390 – Test case - will cause crash

Test case - will cause crash

test.html (text/html), 456 bytes, created by Daniel Bates on 2018-08-28 13:44:55 PDT

(hide)

Description:

Filename:

MIME Type:

Creator: Daniel Bates

Created: 2018-08-28 13:44:55 PDT

Size: 456 bytes

patch

obsolete

<html>
<head>
<style>
#first {
    writing-mode: vertical-rl;
    -webkit-text-combine: horizontal;
}
</style>
<script>
function runTest()
{
    var second = document.getElementById("second");
    var range = document.caretRangeFromPoint();
    range.surroundContents(second); // Crash
}
</script>
</head>
<body onload="runTest()">
<div id="first">A</div>
<span id="second"></span> <!-- Must be an inline element. -->
</body>
</html>

Actions: View

Attachments on bug 184390: 348337 | 348349