LayoutTests/editing/selection/longpress-selection-in-iframe-removed-crash.html - Issue 1315983004: Fix use-after-free bug in long press selection

Side by Side Diff

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Keyboard Shortcuts

	File
u :	up to issue
j / k :	jump to file after / before current file
J / K :	jump to next file with a comment after / before current file
	Side-by-side diff
i :	toggle intra-line diffs
e :	expand all comments
c :	collapse all comments
s :	toggle showing all comments
n / p :	next / previous diff chunk or comment
N / P :	next / previous comment
<Up> / <Down> :	next / previous line

	Issue
u :	up to list of issues
j / k :	jump to patch after / before current patch
o / <Enter> :	open current patch in side-by-side view
i :	open current patch in unified diff view

	Issue List
j / k :	jump to issue after / before current issue
o / <Enter> :	open current issue

Side by Side Diff: LayoutTests/editing/selection/longpress-selection-in-iframe-removed-crash.html

Issue 1315983004: Fix use-after-free bug in long press selection (Closed) Base URL: https://chromium.googlesource.com/chromium/blink.git@master

Patch Set: address feedback Created 5 years, 3 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

OLD	NEW
(Empty)
	1 <!DOCTYPE html>

	2 <script src="../../resources/testharness.js"></script>

	3 <script src="../../resources/testharnessreport.js"></script>

	4 <script type="text/javascript">

	5 "use strict";

	6

	7 async_test(function(t) {

	8 if (!window.eventSender)

	9 assert_unreached("This test requires window.eventSender to exist");

	10

	11 document.addEventListener("DOMContentLoaded", t.step_func(function() {

	12 var iframe1 = document.createElementNS("http://www.w3.org/1999/xhtml", "if rame");

	13 iframe1.setAttribute("srcdoc", "ABC");

	14 document.documentElement.appendChild(iframe1);

	15 var document1 = document.implementation.createDocument("", null);

	16 iframe1.addEventListener("DOMFocusOut", function() {

	17 document1.adoptNode(iframe1);

	18 });

	19 iframe1.focus();

	20

	21 iframe1.addEventListener("load", t.step_func(function() {

	22 document.designMode = "on";

	23

	24 var clientRect = iframe1.getBoundingClientRect();

	25 var x = clientRect.left + 10;

	26 var y = clientRect.top + 10;

	27 eventSender.gestureLongPress(x, y);

	28

	29 // Test passes if it does not crash and reaches this point

	30 setTimeout(t.done.bind(t), 0);

	31 }));

	32 }));

	33 }, "Test longpress selection does not crash");

	34 </script>

OLD	NEW

« no previous file with comments | « no previous file | Source/core/input/EventHandler.cpp » ('j') | no next file with comments »