NULL+4*N 9c5.305 @ microsoftedgecp.exe!edgehtml.dll!Tree::TreeReader::GetNextPreorderNode

Duplicate Issue #7206604 • See Issue #7206617

Details

Created
Apr 14, 2016
Privacy
This issue is public.
Duplicates
See progress on Bug #7206617
Reports
Reported by 1 person

Sign in to watch or report this issue.

Steps to reproduce

Repro:
<body onload=x.offsetTop;x.style.order=8><ol><li style="column-width:4" id=x>
Different repro with same crash stack:
<svg display="list-item" xmlns="http://www.w3.org/2000/svg" onload="setTimeout('document.execCommand(‘BackColor’)')">

Attachments

0 attachments

    Comments and activity

    • Microsoft Edge Team

      Changed Assigned To to “Travis L.”

      Changed Assigned To from “Travis L.” to “Brad E.”

    • Hello,

      Thank you for the feedback on Edge. It seems that this does not crash Edge on my local workstation. Are there any additional steps needed to repro the crash?

      All the best,
      The MS Edge Team

    • Microsoft Edge Team

      Changed Status to “Duplicate”

    • Closed as a duplicate of 7206617

    You need to sign in to your Microsoft account to add a comment.

    Sign in