Index: LayoutTests/fast/shapes/shape-outside-floats/shape-outside-negative-height-crash.html |
diff --git a/LayoutTests/fast/shapes/shape-outside-floats/shape-outside-negative-height-crash.html b/LayoutTests/fast/shapes/shape-outside-floats/shape-outside-negative-height-crash.html |
new file mode 100644 |
index 0000000000000000000000000000000000000000..81bbc6cbf86625f840452c06da9d5c0213e9e213 |
--- /dev/null |
+++ b/LayoutTests/fast/shapes/shape-outside-floats/shape-outside-negative-height-crash.html |
@@ -0,0 +1,26 @@ |
+<!DOCTYPE html> |
+<style> |
+ .container { |
+ width: 10px; |
+ } |
+ .float { |
+ float: left; |
+ } |
+ .crasher { |
+ /* 1x1 px transparent png */ |
+ shape-outside: url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR4nGP6zwAAAgcBApocMXEAAAAASUVORK5CYII=); |
+ margin-top: -29px; |
Bem Jones-Bey (adobe)
2015/01/09 00:01:08
The WebKit patch has -19px here. Did that not cras
|
+ } |
+</style> |
+<body> |
+ <p>This test passes if it doesn't crash.</p> |
+ <div class="container"> |
+ <div class="float">a a</div> |
+ <div class="float crasher">a</div> |
+ a |
+ </div> |
+</body> |
+<script> |
+if (window.testRunner) |
+ testRunner.dumpAsText(); |
+</script> |