Index: LayoutTests/fast/css/get-matched-css-rules-set-selector-text.html |
diff --git a/LayoutTests/fast/css/get-matched-css-rules-set-selector-text.html b/LayoutTests/fast/css/get-matched-css-rules-set-selector-text.html |
new file mode 100644 |
index 0000000000000000000000000000000000000000..86a034fd58273ec0589d1017b2bb558f7c5de7e9 |
--- /dev/null |
+++ b/LayoutTests/fast/css/get-matched-css-rules-set-selector-text.html |
@@ -0,0 +1,13 @@ |
+<!DOCTYPE html> |
+<style> |
+html, img { border: 5px solid salmon; } |
+</style> |
+<script> |
+function eventhandler() { |
+ window.getMatchedCSSRules(document.documentElement)[0].selectorText = 'div'; |
+ document.documentElement.offsetHeight; // Crash under ASAN was here in updateStyleIfNeeded |
+} |
+</script> |
+<img> |
+<iframe onbeforeload="eventhandler()"></iframe> |
+<div>This div should be the only element with a 5px border.</div> |