| OLD | NEW |
| (Empty) | |
| 1 <!DOCTYPE html> |
| 2 |
| 3 <!-- Disable auto scrollbars, to avoid an extra layout pass, which |
| 4 would hide the bug. The original fuzzer test instead used an |
| 5 insane margin on an atomic inline to make sure the scrollbars |
| 6 stayed put. --> |
| 7 <style>body { overflow:scroll; }</style> |
| 8 |
| 9 <p>PASS if no crash.</p> |
| 10 |
| 11 <div id="rightFloat" style="float:right; height:40px;"></div> |
| 12 <div style="float:left; height:300px;"></div> |
| 13 <span> |
| 14 <div id="inlineBlock2" style="display:none; width:30px; height:300px;"></div
> |
| 15 <span id="inline" style="display:none;">x</span> |
| 16 </span> |
| 17 <div> |
| 18 <div style="height:40px;"></div> |
| 19 <div style="display:table; writing-mode:vertical-lr;"> |
| 20 <div> |
| 21 <div id="dummyBlock" style="display:none;"></div> |
| 22 </div> |
| 23 <div id="inlineBlock1" style="display:inline-block; width:30px; height:3
00px;"></div> |
| 24 </div> |
| 25 </div> |
| 26 <script src="../../resources/testharness.js"></script> |
| 27 <script src="../../resources/testharnessreport.js"></script> |
| 28 <script> |
| 29 if (window.testRunner) |
| 30 testRunner.dumpAsText(); |
| 31 test(() => { |
| 32 document.body.offsetTop; |
| 33 document.getElementById("inlineBlock1").style.display = "none"; |
| 34 document.getElementById("inlineBlock2").style.display = "inline-block"; |
| 35 document.body.offsetTop; |
| 36 document.getElementById("rightFloat").style.display = "none"; |
| 37 document.getElementById("dummyBlock").style.display = "block"; |
| 38 document.body.offsetTop; |
| 39 document.getElementById("inline").style.display = "inline"; |
| 40 }, "no crash or assertion failure"); |
| 41 </script> |
| OLD | NEW |