Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(435)

Unified Diff: third_party/WebKit/LayoutTests/svg/animations/target-move-relative-length-invalidation-crash.html

Issue 2817913002: Add connected-paranoia in SVGElement::UpdateRelativeLengthsInformation (Closed)
Patch Set: Created 3 years, 8 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: third_party/WebKit/LayoutTests/svg/animations/target-move-relative-length-invalidation-crash.html
diff --git a/third_party/WebKit/LayoutTests/svg/animations/target-move-relative-length-invalidation-crash.html b/third_party/WebKit/LayoutTests/svg/animations/target-move-relative-length-invalidation-crash.html
new file mode 100644
index 0000000000000000000000000000000000000000..7118f1fce06cc4bb7cc392de78a36a26834c61ee
--- /dev/null
+++ b/third_party/WebKit/LayoutTests/svg/animations/target-move-relative-length-invalidation-crash.html
@@ -0,0 +1,30 @@
+<!DOCTYPE html>
+<svg>
+ <g id="g1">
+ <text id="text1"/>
+ </g>
+ <g id="g2">
+ <text id="text2"/>
+ <animate values="100" href="#text2" attributeName="x" dur="4s"/>
+ </g>
+</svg>
+<p>PASS if no crash</p>
+<script>
+if (window.testRunner) {
+ testRunner.dumpAsText();
+ testRunner.waitUntilDone();
+}
+var g1 = document.getElementById("g1");
+var g2 = document.getElementById("g2");
+var text1 = document.getElementById("text1");
+
+window.onload = function() {
+ requestAnimationFrame(function() {
+ g1.remove();
+ text1.appendChild(document.querySelector("svg"));
+ g1.appendChild(g2);
+ if (window.testRunner)
+ testRunner.notifyDone();
+ });
+};
+</script>

Powered by Google App Engine
This is Rietveld 408576698