third_party/WebKit/LayoutTests/editing/selection/unrooted-selection-start-crash.html

   1 <!DOCTYPE html>
   2 <script>
   3 if (window.testRunner)
   4   testRunner.dumpAsText();
   5
   6 onload = function() {
   7   var elem = document.getElementById("test");
   8   // This will select from before <img> to after <br>.
   9   window.getSelection().setBaseAndExtent(elem, 0, elem, 4);
  10   document.execCommand('JustifyCenter', false, null);
  11 }
  12 </script>
  13 Should not crash when selection start is unrooted (caused by reattachment of render objects).
  14 <span id="test" contenteditable="true">
  15   <b><img></b>
  16   <br>
  17 </span>