Index: LayoutTests/fast/shapes/shape-outside-floats/shape-outside-negative-height-crash.html |
diff --git a/LayoutTests/fast/shapes/shape-outside-floats/shape-outside-negative-height-crash.html b/LayoutTests/fast/shapes/shape-outside-floats/shape-outside-negative-height-crash.html |
new file mode 100644 |
index 0000000000000000000000000000000000000000..81f043aacda86c67f1896262a0e7efdf753dbc35 |
--- /dev/null |
+++ b/LayoutTests/fast/shapes/shape-outside-floats/shape-outside-negative-height-crash.html |
@@ -0,0 +1,27 @@ |
+<!DOCTYPE html> |
+<style> |
+ .container { |
+ width: 10px; |
+ font: 18px Ahem; |
+ } |
+ .float { |
+ float: left; |
+ } |
+ .crasher { |
+ /* 1x1 px transparent png */ |
+ shape-outside: url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR4nGP6zwAAAgcBApocMXEAAAAASUVORK5CYII=); |
+ margin-top: -19px; |
+ } |
+</style> |
+<body> |
+ <p>This test passes if it doesn't crash.</p> |
+ <div class="container"> |
+ <div class="float">a a</div> |
+ <div class="float crasher">a</div> |
+ a |
+ </div> |
+</body> |
+<script> |
+if (window.testRunner) |
+ testRunner.dumpAsText(); |
+</script> |