ImageDocumentParser should stop sending data to ImageResource once decoding fails.

third_party/WebKit/Source/web/tests/WebFrameTest.cpp

 /*
  * Copyright (C) 2010 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 8813 matching lines @@
     request.setURL(toKURL("javascript:location='" + redirectURL + "'"));
     request.setRequestorOrigin(WebSecurityOrigin::createUnique());
     helper.webView()->mainFrameImpl()->loadRequest(request);
 
     // Normally, the result of the JS url replaces the existing contents on the
     // Document. However, if the JS triggers a navigation, the contents should
     // not be replaced.
     EXPECT_EQ("", toLocalFrame(helper.webView()->page()->mainFrame())->document()->documentElement()->innerText());
 }
 
+class MultipleDataChunkDelegate : public WebURLLoaderTestDelegate {
+public:
+    void didReceiveData(WebURLLoaderClient* originalClient, WebURLLoader* loader, const char* data, int dataLength, int encodedDataLength) override
+    {
+        EXPECT_GT(dataLength, 16);
+        originalClient->didReceiveData(loader, data, 16, 16, 16);
+        // This didReceiveData call shouldn't crash due to a failed assertion.
+        originalClient->didReceiveData(loader, data + 16, dataLength - 16, encodedDataLength - 16, dataLength - 16);
+    }
+};
+
+TEST_F(WebFrameTest, ImageDocumentDecodeError)
+{
+    std::string url = m_baseURL + "not_an_image.ico";
+    URLTestHelpers::registerMockedURLLoad(toKURL(url), "not_an_image.ico", "image/x-icon");
+    MultipleDataChunkDelegate delegate;
+    Platform::current()->getURLLoaderMockFactory()->setLoaderDelegate(&delegate);
+
+    FrameTestHelpers::WebViewHelper helper;
+    helper.initializeAndLoad(url, true);
+    Document* document = toLocalFrame(helper.webView()->page()->mainFrame())->document();
+    EXPECT_TRUE(document->isImageDocument());
+    EXPECT_EQ(Resource::DecodeError, toImageDocument(document)->cachedImage()->getStatus());
+}
+
 } // namespace blink