ImageDocumentParser should stop sending data to ImageResource once decoding fails.

third_party/WebKit/Source/web/tests/WebFrameTest.cpp

 /*
  * Copyright (C) 2010 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 8905 matching lines @@
     client.addExpectedRequest(toKURL("http://internal.test/priorities/document-write.js"), WebURLRequest::PriorityHigh);
     client.addExpectedRequest(toKURL("http://internal.test/priorities/injected.js"), WebURLRequest::PriorityLow);
     client.addExpectedRequest(toKURL("http://internal.test/priorities/injected-async.js"), WebURLRequest::PriorityLow);
     client.addExpectedRequest(toKURL("http://internal.test/priorities/body.js"), WebURLRequest::PriorityHigh);
 
     FrameTestHelpers::WebViewHelper helper;
     helper.initializeAndLoad(m_baseURL + "script_priority.html", true, &client);
     client.verifyAllRequests();
 }
 
+class MultipleDataChunkDelegate : public WebURLLoaderTestDelegate {
+public:
+    void didReceiveData(WebURLLoaderClient* originalClient, WebURLLoader* loader, const char* data, int dataLength, int encodedDataLength) override
+    {
+        EXPECT_GT(dataLength, 16);
+        originalClient->didReceiveData(loader, data, 16, 16, 16);
+        // This didReceiveData call shouldn't crash due to a failed assertion.
+        originalClient->didReceiveData(loader, data + 16, dataLength - 16, encodedDataLength - 16, dataLength - 16);
+    }
+};
+
+TEST_F(WebFrameTest, ImageDocumentDecodeError)
+{
+    std::string url = m_baseURL + "not_an_image.ico";
+    URLTestHelpers::registerMockedURLLoad(toKURL(url), "not_an_image.ico", "image/x-icon");
+    MultipleDataChunkDelegate delegate;
+    Platform::current()->getURLLoaderMockFactory()->setLoaderDelegate(&delegate);
+    FrameTestHelpers::WebViewHelper helper;
+    helper.initializeAndLoad(url, true);
+    Platform::current()->getURLLoaderMockFactory()->setLoaderDelegate(nullptr);
+
+    Document* document = toLocalFrame(helper.webView()->page()->mainFrame())->document();
+    EXPECT_TRUE(document->isImageDocument());
+    EXPECT_EQ(Resource::DecodeError, toImageDocument(document)->cachedImage()->getStatus());
+}
+
 } // namespace blink