Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(27)

Unified Diff: LayoutTests/editing/execCommand/resources/format-block-crash-iframe.html

Issue 182533004: Fix crash in CompositeEditCommand::cloneParagraphUnderNewElement(). (Closed) Base URL: svn://svn.chromium.org/blink/trunk
Patch Set: Created 6 years, 10 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: LayoutTests/editing/execCommand/resources/format-block-crash-iframe.html
diff --git a/LayoutTests/editing/execCommand/resources/format-block-crash-iframe.html b/LayoutTests/editing/execCommand/resources/format-block-crash-iframe.html
new file mode 100644
index 0000000000000000000000000000000000000000..350ef56be024c510e43e08f613fba40a8f70b07e
--- /dev/null
+++ b/LayoutTests/editing/execCommand/resources/format-block-crash-iframe.html
@@ -0,0 +1,29 @@
+<!DOCTYPE html>
+<html>
+<head>
+<title>FormatBlock crash test case</title>
+</head>
+<!-- This is a minified version of the clusterfuzz test case at https://code.google.com/p/chromium/issues/detail?id=345005 -->
+<body style="display: table-row;">
+<script>
+function run()
+{
+ document.designMode = 'on';
+ document.execCommand('SelectAll');
+ document.execCommand('FormatBlock', false, '<' + 'div>');
+ window.setTimeout(notifyFinish, 0);
+}
+
+function notifyFinish()
+{
+ window.parent.postMessage('FINISH', '*');
+}
+
+window.setTimeout(run, 0);
+</script>
+<span contenteditable="true" style="display: table-caption;"></span>
+<span></span>
+<div style="display: -webkit-inline-box;"><span><span>B</span></span></div>
+<div></div>
+</body>
+</html>
« no previous file with comments | « LayoutTests/editing/execCommand/format-block-crash-expected.txt ('k') | Source/core/editing/CompositeEditCommand.h » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698