Bug 1415231 - Add crash tests for a regression of bug 1406482 which has been fixed by bug 1415509 r=m_kato

This crash test can cause crash before landing the patches for bug 1415509. So, let's take this for regression test. MozReview-Commit-ID: 652wi49e720 --HG-- extra : rebase_source : a7a897670220e4f14df91c4093e65aa7da7f6015
2017-11-10 10:58:33 +09:00 · 2017-11-10 10:58:33 +09:00 · c94238ae4f
--- a/editor/libeditor/crashtests/1415231.html
+++ b/editor/libeditor/crashtests/1415231.html
@ -0,0 +1,17 @@
+<script>
+function jsfuzzer() {
+  var var00043 = window.getSelection();
+  htmlvar00018.addEventListener("DOMNodeRemoved", eh1);
+  var00043.setPosition(htmlvar00016);
+  document.execCommand("insertText", false, "1");
+}
+function eh1() {
+  document.execCommand("insertHorizontalRule", false);
+  document.execCommand("justifyCenter", false);
+}
+</script>
+<body onload=jsfuzzer()>
+<li contenteditable="true">
+<shadow id="htmlvar00016">
+<ins id="htmlvar00018">
+<option>
--- a/editor/libeditor/crashtests/crashtests.list
+++ b/editor/libeditor/crashtests/crashtests.list
@ -94,3 +94,4 @@ load 1402904.html
 load 1405747.html
 load 1408170.html
 load 1414581.html
+load 1415231.html