Chromium Code Reviews Chromium Code Reviews
Issue 26168008:
[blink] Avoid null pointer dereference in HitTestResult::isMisspelled() (Closed)
Base URL: https://chromium.googlesource.com/chromium/blink.git@master| Index: LayoutTests/editing/spelling/right-click-no-renderer-crash.html |
| diff --git a/LayoutTests/editing/spelling/right-click-no-renderer-crash.html b/LayoutTests/editing/spelling/right-click-no-renderer-crash.html |
| new file mode 100644 |
| index 0000000000000000000000000000000000000000..0ae8449a878c292940ed797ec2f9a278ca5fe65f |
| --- /dev/null |
| +++ b/LayoutTests/editing/spelling/right-click-no-renderer-crash.html |
| @@ -0,0 +1,26 @@ |
| +<!DOCTYPE html> |
| +<html> |
| +<head> |
| +<script src="../../resources/js-test.js"></script> |
| +<script> |
| +window.onload = function() { |
| + var element = document.getElementsByTagName('*')[0]; |
|
eseidel
2014/02/25 00:30:02
Can we be more specific as to which element we're
please use gerrit instead
2014/02/25 01:14:53
Changed '*' to 'html'. Only <html> element causes
|
| + document.adoptNode(element); |
| + var newElement = document.createElementNS('http://www.w3.org/2000/svg', 'title'); |
| + document.appendChild(newElement); |
| + document.execCommand('SelectAll', false) |
| + document.designMode = 'on'; |
| + |
| + description('Page should not crash when a node does not have a renderer object associated with it. ' + |
| + 'To test manually, right-click anywhere on the page. ' + |
| + 'The test succeeds if the page does not crash. '); |
| + |
| + if (window.eventSender) { |
| + eventSender.contextClick(); |
|
eseidel
2014/02/25 00:30:02
Is this click at 0,0?
please use gerrit instead
2014/02/25 01:14:53
Changed the click to be explicitly at (10, 10). It
|
| + } |
| + |
| + finishJSTest(); |
| +}; |
| +</script> |
| +</head> |
| +</html> |
