Chromium Code Reviews Chromium Code Reviews
Issue 539603002:
adoptNode wasn't clearing the accessibility cache. (Closed)
Base URL: https://chromium.googlesource.com/chromium/blink.git@master| Index: LayoutTests/accessibility/adopt-node-causes-crash.html |
| diff --git a/LayoutTests/accessibility/adopt-node-causes-crash.html b/LayoutTests/accessibility/adopt-node-causes-crash.html |
| new file mode 100644 |
| index 0000000000000000000000000000000000000000..a2f6a7c3e430a91c8206abf578e48a143e7be6ec |
| --- /dev/null |
| +++ b/LayoutTests/accessibility/adopt-node-causes-crash.html |
| @@ -0,0 +1,25 @@ |
| +<html> |
|
esprehn
2014/09/04 20:00:46
Add <!DOCTYPE html>,
remove <head>, Body> and <ht
dmazzoni
2014/09/05 00:19:13
Done.
|
| +<head> |
| +<script src="../resources/js-test.js"></script> |
| +</head> |
| +<body> |
| + |
| +<!-- Nodes inside a canvas get an AXNodeObject, not an AXRenderObject. --> |
| +<canvas> |
| + <div id=node2></div> |
| +</canvas> |
| + |
| +<script> |
| + description("Ensure that if we have an AXNodeObject with a raw pointer to a Node, the accessible object gets correctly detached if we adopt the node into a new document."); |
| + |
| + // This triggers an asynchronous accessibility notification. |
| + document.getElementById("node2").setAttribute("aria-label", "Label"); |
| + |
| + // Adopt the node into a new document, then garbage-collect it. |
| + // Make sure the notification doesn't try to access the invalid node. |
| + document.implementation.createDocument("", null).adoptNode(node2); |
| + gc(); |
| +</script> |
| + |
| +</body> |
| +</html> |
