Index: LayoutTests/editing/style/apply-style-crash2.html |
diff --git a/LayoutTests/editing/style/apply-style-crash2.html b/LayoutTests/editing/style/apply-style-crash2.html |
new file mode 100644 |
index 0000000000000000000000000000000000000000..7483cb97864471f053735ef31dd54c606e0470ea |
--- /dev/null |
+++ b/LayoutTests/editing/style/apply-style-crash2.html |
@@ -0,0 +1,25 @@ |
+<!DOCTYPE html> |
+<html> |
+<body> |
+This test passes if it does not crash. |
+<script> |
+if (window.testRunner) |
+ testRunner.dumpAsText(); |
+ |
+el1 = document.createElement('li'); |
+document.body.appendChild(el1); |
+el2 = document.createElement('thead'); |
+el1.appendChild(el2); |
+el2.parentNode.insertBefore(document.createElement('video'), el2); |
+el2.parentNode.insertBefore(document.createElement('input'), el2); |
+document.designMode = 'on'; |
+window.getSelection().setBaseAndExtent(el1, 2, el2, 4); |
+document.designMode = 'off'; |
+window.getSelection().modify('extend', 'backward', 'character'); |
+el1.innerHTML = "PASS"; |
+document.designMode = 'on'; |
+document.execCommand('FontSizeDelta', false, '-1px'); |
+document.designMode = 'off'; |
+</script> |
+</body> |
+</html> |