Chromium Code Reviews Chromium Code Reviews
Issue 302083005:
Don't leave stale pointers into m_grid (Closed)
Base URL: https://chromium.googlesource.com/chromium/blink.git@master| Index: LayoutTests/fast/css-grid-layout/stale-grid-layout.html |
| diff --git a/LayoutTests/fast/css-grid-layout/stale-grid-layout.html b/LayoutTests/fast/css-grid-layout/stale-grid-layout.html |
| new file mode 100644 |
| index 0000000000000000000000000000000000000000..880c743be11b18c3910e5c8fa92a61f2ec462267 |
| --- /dev/null |
| +++ b/LayoutTests/fast/css-grid-layout/stale-grid-layout.html |
| @@ -0,0 +1,28 @@ |
| +<!DOCTYPE html> |
| +<keygen> |
| +<div style="display: grid;">The test checks that we don't add non-children of the grid into the grid representation<br>This test has passed if it didn't crash under ASAN |
|
Julien - ping for review
2014/06/10 00:18:32
Nit: Missing final dot.
|
| + <embed type=something-not-js> |
| +</div> |
| +<style> |
| +embed { position: absolute; } |
| +.foo ~ .c1 { animation-delay: 45762s; } |
|
Julien - ping for review
2014/06/10 00:18:32
45762s is a lot of seconds but also not something
|
| +</style> |
| +<script> |
| +if (window.testRunner) |
| + testRunner.dumpAsText(); |
| + |
| +function crash() { |
| + var highlight = document.createElementNS("http://www.w3.org/1999/xhtml", "highlight"); |
| + highlight.setAttribute("class", "c1"); |
| + document.body.appendChild(highlight); |
| + |
| + for (i=0; i != 8; i++) |
| + eventSender.keyDown("\t"); |
| + eventSender.keyDown("X"); |
| +} |
| + |
| +if (!window.eventSender) |
| + alert("This test needs to be run under DumpRenderTree."); |
| +else |
| + document.addEventListener("DOMContentLoaded", crash, false); |
| +</script> |
