Index: LayoutTests/fast/css-grid-layout/grid-item-before-anonymous-child-crash.html |
diff --git a/LayoutTests/fast/css-grid-layout/grid-item-before-anonymous-child-crash.html b/LayoutTests/fast/css-grid-layout/grid-item-before-anonymous-child-crash.html |
new file mode 100644 |
index 0000000000000000000000000000000000000000..7d77de9f305419c654ae1b553f3a11105cc869df |
--- /dev/null |
+++ b/LayoutTests/fast/css-grid-layout/grid-item-before-anonymous-child-crash.html |
@@ -0,0 +1,16 @@ |
+<body> |
+ <p>This test checks that adding a new grid item before an already existing item wrapped by an anonymous block does not crash under ASAN.</p> |
+ <div id=grid style="display: grid; grid-auto-flow: stack;">X</div> |
+</body> |
+<script type="text/javascript"> |
+ if (window.testRunner) |
+ testRunner.dumpAsText(); |
+ |
+ document.addEventListener("DOMContentLoaded", crash, false); |
+ |
+ function crash() { |
+ document.designMode = 'on'; |
+ window.getSelection().selectAllChildren(grid); |
+ document.execCommand("Italic", null); |
+ } |
+</script> |