Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(697)

Side by Side Diff: LayoutTests/editing/selection/contains-node-crash.html

Issue 15390003: Use-after-free in WebCore::Range::compareBoundaryPoints (Closed) Base URL: svn://svn.chromium.org/blink/trunk
Patch Set: Created 7 years, 7 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
OLDNEW
(Empty)
1 <!DOCTYPE html>
2 <html style="display: inline-table">
3 <script>
4 if (window.testRunner)
5 testRunner.dumpAsText();
6
7 window.onload = function() {
8 var selection = window.getSelection();
9 selection.selectAllChildren(document);
10 selection.collapseToEnd();
11 var element = document.activeElement;
12 document.open();
13 document.write("Pass. Test didn't crash.");
14 document.close();
15 selection.containsNode(element,true);
16 }
17 </script>
18 </html>
OLDNEW
« no previous file with comments | « no previous file | LayoutTests/editing/selection/contains-node-crash-expected.txt » ('j') | Source/core/page/DOMSelection.cpp » ('J')

Powered by Google App Engine
This is Rietveld 408576698