Index: LayoutTests/fast/table/table-rowspan-crash-with-huge-pedding-value.html |
diff --git a/LayoutTests/fast/table/table-rowspan-crash-with-huge-pedding-value.html b/LayoutTests/fast/table/table-rowspan-crash-with-huge-pedding-value.html |
new file mode 100644 |
index 0000000000000000000000000000000000000000..a6426428667c7b237d3ffc0cbcb2ce1039e59a15 |
--- /dev/null |
+++ b/LayoutTests/fast/table/table-rowspan-crash-with-huge-pedding-value.html |
@@ -0,0 +1,25 @@ |
+<!DOCTYPE html> |
+<html> |
+<head> |
+ <script type="text/javascript"> |
+ if (window.testRunner) |
+ testRunner.dumpAsText(); |
+ </script> |
+ <style> |
+ td, h4, h6 {padding-top:25000pt;} |
+ </style> |
+</head> |
+<body> |
+ <h2>Test for chromium bug : <a href="https://code.google.com/p/chromium/issues/detail?id=334652">334652</a>. ASSERTION FAILED: !remainder in WebCore::RenderTableSection::distributeExtraRowSpanHeightToAutoRows.</h3> |
+ <h3>For this test to PASS, it should not crash.</h4> |
+ <table border="1"> |
+ <tr> |
+ <td>r0c0</td> |
+ <td rowspan="2"> |
+ <h6>r0c1</h6> |
+ <h4> rowspan=2</h4> |
+ </td> |
+ </tr> |
+ </table> |
+</body> |
+</html> |