LayoutTests/fast/css-generated-content/normalize-with-first-letter-and-before-content-crash.html - Issue 23463021: Avoid collapsing anonymous block children already being destroyed

Side by Side Diff

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Keyboard Shortcuts

	File
u :	up to issue
j / k :	jump to file after / before current file
J / K :	jump to next file with a comment after / before current file
	Side-by-side diff
i :	toggle intra-line diffs
e :	expand all comments
c :	collapse all comments
s :	toggle showing all comments
n / p :	next / previous diff chunk or comment
N / P :	next / previous comment
<Up> / <Down> :	next / previous line

	Issue
u :	up to list of issues
j / k :	jump to patch after / before current patch
o / <Enter> :	open current patch in side-by-side view
i :	open current patch in unified diff view

	Issue List
j / k :	jump to issue after / before current issue
o / <Enter> :	open current issue

Side by Side Diff: LayoutTests/fast/css-generated-content/normalize-with-first-letter-and-before-content-crash.html

Issue 23463021: Avoid collapsing anonymous block children already being destroyed (Closed) Base URL: svn://svn.chromium.org/blink/trunk

Patch Set: Created 7 years, 3 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

OLD	NEW
1 <!DOCTYPE html>	1 <!doctype html>

2 <html>

3 <style>	2 <style>

4 .absolutePosition { position: fixed; }	3 .absolutePosition { position: fixed; }

5 .float:before { float: right; content: ''; }	4 .float:before { float: right; content: ''; }

6 .float:first-letter { float: right; }	5 .float:first-letter { float: right; }

7 .inline::first-letter { content: ''; }	6 .inline::first-letter { content: ''; }

8 </style>	7 </style>

9 <script>	8 <script>

10 if (window.testRunner)	9 function crash() {

11 testRunner.dumpAsText();

12

13 function startTest() {

14 document.body.offsetTop;	10 document.body.offsetTop;

15 var parent = document.getElementById("parent");	11 parent = document.getElementById('parent');

16 var child = document.getElementById("child");

17 child.setAttribute('class', 'inline');	12 child.setAttribute('class', 'inline');

18 document.body.offsetTop;	13 document.body.offsetTop;

19 parent.removeChild(child);	14 parent.removeChild(child);

20 document.body.offsetTop;	15 parent.normalize();

21 parent.setAttribute('class', 'inline');

22 }	16 }

23 window.onload = startTest;	17 window.onload = crash;

	18 if (window.testRunner)

	19 testRunner.dumpAsText();

24 </script>	20 </script>

25 WebKit Bug 85759 - Crash in RenderBlock::updateFirstLetterStyle.

26 <div class="float" id="parent">	21 <div class="float" id="parent">

27 <div class="absolutePosition" id="child"></div>	22 <div class="absolutePosition" id="child"></div>

28 PASS if test does not crash.	23 Test passes if no crash.

29 </div>

30 </html>

OLD	NEW