Change HTMLTokenizer::Attribute::Range.start initial invalid value from 0 -> -1

third_party/WebKit/Source/core/html/parser/HTMLTokenizerTest.cpp

Index: third_party/WebKit/Source/core/html/parser/HTMLTokenizerTest.cpp
diff --git a/third_party/WebKit/Source/core/html/parser/HTMLTokenizerTest.cpp b/third_party/WebKit/Source/core/html/parser/HTMLTokenizerTest.cpp
new file mode 100644
index 0000000000000000000000000000000000000000..1b98177a045973304b8c4af5e6150bc7948f77f4
--- /dev/null
+++ b/third_party/WebKit/Source/core/html/parser/HTMLTokenizerTest.cpp
@@ -0,0 +1,32 @@
+// Copyright 2016 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "core/html/parser/HTMLTokenizer.h"
+
+#include "core/html/parser/HTMLParserOptions.h"
+#include "core/html/parser/HTMLToken.h"
+#include "testing/gtest/include/gtest/gtest.h"
+
+#include <memory>
+
+namespace blink {
+
+// This is a regression test for crbug.com/619141
+TEST(HTMLTokenizerTest, ZeroOffsetAttributeNameRange)
+{
+    HTMLParserOptions options;
+    std::unique_ptr<HTMLTokenizer> tokenizer = HTMLTokenizer::create(options);
+    HTMLToken token;
+
+    SegmentedString input("<script ");
+    EXPECT_FALSE(tokenizer->nextToken(input, token));
+
+    EXPECT_EQ(HTMLToken::StartTag, token.type());
+
+    SegmentedString input2("type='javascript'");
+    // Below should not fail ASSERT
+    EXPECT_FALSE(tokenizer->nextToken(input2, token));
+}
+
+} // namespace blink