Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(9)

Unified Diff: LayoutTests/fast/dom/HTMLTemplateElement/content-outlives-template-crash.html

Issue 23708025: Clear TemplateContentDocumentFragment::m_host when HTMLTemplateElement is destroyed (Closed) Base URL: svn://svn.chromium.org/blink/trunk
Patch Set: Created 7 years, 3 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: LayoutTests/fast/dom/HTMLTemplateElement/content-outlives-template-crash.html
diff --git a/LayoutTests/fast/dom/HTMLTemplateElement/content-outlives-template-crash.html b/LayoutTests/fast/dom/HTMLTemplateElement/content-outlives-template-crash.html
new file mode 100644
index 0000000000000000000000000000000000000000..8c8ccd55429b253ff08ade4b578f46e96e7cc778
--- /dev/null
+++ b/LayoutTests/fast/dom/HTMLTemplateElement/content-outlives-template-crash.html
@@ -0,0 +1,12 @@
+<!DOCTYPE html>
+<div>Test passes if it does not crash</div>
+<script src="../../../resources/gc.js"></script>
+<script>
+if (window.testRunner) testRunner.dumpAsText();
+var template = document.createElement('template');
+var content = template.content;
+template = null;
+gc();
+gc();
inferno 2013/09/10 00:57:43 nit: gc() is copied twice.
+content.appendChild(document.createElement('div'));
+</script>

Powered by Google App Engine
This is Rietveld 408576698