Index: third_party/WebKit/LayoutTests/fast/dom/custom/crash-in-getTypeExtension.html |
diff --git a/third_party/WebKit/LayoutTests/fast/dom/custom/crash-in-getTypeExtension.html b/third_party/WebKit/LayoutTests/fast/dom/custom/crash-in-getTypeExtension.html |
new file mode 100644 |
index 0000000000000000000000000000000000000000..3c3829e5a988fd82430da487b042e53a1ba290c0 |
--- /dev/null |
+++ b/third_party/WebKit/LayoutTests/fast/dom/custom/crash-in-getTypeExtension.html |
@@ -0,0 +1,10 @@ |
+<!DOCTYPE html> |
dominicc (has gone to gerrit)
2017/01/19 05:34:46
Could you change the test in this file?
- Registe
Anton Obzhirov
2017/01/19 16:45:44
Yes, with this change it will not be called at all
|
+<script src="../../../resources/testharness.js"></script> |
+<script src="../../../resources/testharnessreport.js"></script> |
+<script> |
+test(() => { |
+ try { |
+ document.createElement("option", { toString: () => { throw "It's a fake string!"; } }); |
+ } catch (e) {} |
+}, "Test for crbug/666610: Crash in blink::getTypeExtension"); |
+</script> |