Index: LayoutTests/svg/filters/feColorMatrix-setAttribute-crash1.html |
diff --git a/LayoutTests/svg/filters/feColorMatrix-setAttribute-crash1.html b/LayoutTests/svg/filters/feColorMatrix-setAttribute-crash1.html |
new file mode 100644 |
index 0000000000000000000000000000000000000000..f60bf4f86adbda96d6714751f50c9d85c03b37f3 |
--- /dev/null |
+++ b/LayoutTests/svg/filters/feColorMatrix-setAttribute-crash1.html |
@@ -0,0 +1,29 @@ |
+<!DOCTYPE html> |
+<html> |
+<head> |
+ <script> |
+ function changeValues() { |
+ document.getElementById('color').setAttribute('values', '1'); |
+ if (window.testRunner) { |
+ testRunner.notifyDone(); |
+ } |
+ } |
+ |
+ onload = function() { |
+ if (window.testRunner) { |
+ testRunner.waitUntilDone(); |
+ } |
+ setTimeout(changeValues, 100); |
pdr.
2015/04/15 18:34:22
What's this timer waiting on?
fs
2015/04/15 22:07:27
For SVGFEColorMatrixElement::build to be called I
Stephen Chennney
2015/04/16 18:12:19
Yes, a paint is needed. In fact, 2 paints are need
Stephen Chennney
2015/04/16 18:12:19
Yes. But I found the way to make it happen.
|
+ } |
+ </script> |
+</head> |
+<body> |
+ <svg id="svg" xmlns="http://www.w3.org/2000/svg" width="100" height="100" filter="url(#MyFilter)" version="1.1"> |
+ <defs> |
+ <filter id="MyFilter"> |
+ <fecolormatrix id="color" type="matrix"></fecolormatrix> |
+ </filter> |
+ </defs> |
+ </svg> |
+</body> |
+</html> |