| Index: LayoutTests/svg/transforms/svg-matrix-tearoff-crash.html
|
| diff --git a/LayoutTests/svg/transforms/svg-matrix-tearoff-crash.html b/LayoutTests/svg/transforms/svg-matrix-tearoff-crash.html
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..932670039d2c59804e73c44b64d9512f5d281496
|
| --- /dev/null
|
| +++ b/LayoutTests/svg/transforms/svg-matrix-tearoff-crash.html
|
| @@ -0,0 +1,16 @@
|
| +<!DOCTYPE html>
|
| +<script>
|
| +if (window.testRunner)
|
| + testRunner.dumpAsText();
|
| +
|
| +function eventhandler1() {
|
| + var transformList = document.createElementNS("http://www.w3.org/2000/svg", "radialGradient").gradientTransform.baseVal;
|
| + var transform = document.querySelector("svg").createSVGTransform();
|
| + transformList.appendItem(transform);
|
| + var matrix = transform.matrix;
|
| + transformList.initialize(transform);
|
| + matrix.flipX();
|
| +}
|
| +</script>
|
| +This test passes if it doesn't crash under ASAN.
|
| +<svg onload="eventhandler1()">
|
|
|