Index: LayoutTests/svg/custom/svg-image-layers-crash.html |
diff --git a/LayoutTests/svg/custom/svg-image-layers-crash.html b/LayoutTests/svg/custom/svg-image-layers-crash.html |
new file mode 100644 |
index 0000000000000000000000000000000000000000..655ffd75b5b8e085e1e5a5ad046a16ce621477bf |
--- /dev/null |
+++ b/LayoutTests/svg/custom/svg-image-layers-crash.html |
@@ -0,0 +1,19 @@ |
+<!DOCTYPE html> |
+<html> |
+ <!-- Test for https://code.google.com/p/chromium/issues/detail?id=266542 --> |
+ <body> |
+ PASS: did not crash. |
+ <script> |
+ var img = new Image(); |
+ img.src = 'data:image/svg+xml;charset=utf-8,' + |
+ '<svg xmlns="http://www.w3.org/2000/svg" width="200" height="200">' + |
+ '<foreignObject width="100%" height="100%">' + |
+ '<div xmlns="http://www.w3.org/1999/xhtml" style="-webkit-transform: matrix3d(1, 0, 0, 0, 0, -1, 0, 0, 0, 0, 1, 0, -770, -270, 0, 1);">Transform Me</div>' + |
+ '</foreignObject>' + |
+ '</svg>'; |
+ |
+ if (window.testRunner) |
+ testRunner.dumpAsText(); |
+ </script> |
+ </body> |
+</html> |