| Index: LayoutTests/svg/custom/svg-image-layers-crash.html
|
| diff --git a/LayoutTests/svg/custom/svg-image-layers-crash.html b/LayoutTests/svg/custom/svg-image-layers-crash.html
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..655ffd75b5b8e085e1e5a5ad046a16ce621477bf
|
| --- /dev/null
|
| +++ b/LayoutTests/svg/custom/svg-image-layers-crash.html
|
| @@ -0,0 +1,19 @@
|
| +<!DOCTYPE html>
|
| +<html>
|
| + <!-- Test for https://code.google.com/p/chromium/issues/detail?id=266542 -->
|
| + <body>
|
| + PASS: did not crash.
|
| + <script>
|
| + var img = new Image();
|
| + img.src = 'data:image/svg+xml;charset=utf-8,' +
|
| + '<svg xmlns="http://www.w3.org/2000/svg" width="200" height="200">' +
|
| + '<foreignObject width="100%" height="100%">' +
|
| + '<div xmlns="http://www.w3.org/1999/xhtml" style="-webkit-transform: matrix3d(1, 0, 0, 0, 0, -1, 0, 0, 0, 0, 1, 0, -770, -270, 0, 1);">Transform Me</div>' +
|
| + '</foreignObject>' +
|
| + '</svg>';
|
| +
|
| + if (window.testRunner)
|
| + testRunner.dumpAsText();
|
| + </script>
|
| + </body>
|
| +</html>
|
|
|