Bug 1415231 - Add crash tests for a regression of
bug 1406482 which has been fixed by
bug 1415509 r?m_kato
This crash test can cause crash before landing the patches for
bug 1415509.
So, let's take this for regression test.
MozReview-Commit-ID: 652wi49e720
new file mode 100644
--- /dev/null
+++ b/editor/libeditor/crashtests/1415231.html
@@ -0,0 +1,17 @@
+<script>
+function jsfuzzer() {
+ var var00043 = window.getSelection();
+ htmlvar00018.addEventListener("DOMNodeRemoved", eh1);
+ var00043.setPosition(htmlvar00016);
+ document.execCommand("insertText", false, "1");
+}
+function eh1() {
+ document.execCommand("insertHorizontalRule", false);
+ document.execCommand("justifyCenter", false);
+}
+</script>
+<body onload=jsfuzzer()>
+<li contenteditable="true">
+<shadow id="htmlvar00016">
+<ins id="htmlvar00018">
+<option>
--- a/editor/libeditor/crashtests/crashtests.list
+++ b/editor/libeditor/crashtests/crashtests.list
@@ -89,8 +89,9 @@ load 1384161.html
load 1388075.html
load 1393171.html
needs-focus load 1402196.html
load 1402469.html
load 1402904.html
load 1405747.html
load 1408170.html
load 1414581.html
+load 1415231.html