Title: [96124] trunk/LayoutTests
- Revision
- 96124
- Author
- [email protected]
- Date
- 2011-09-27 10:18:06 -0700 (Tue, 27 Sep 2011)
Log Message
Crash in WebCore::HTMLParser::createHead
https://bugs.webkit.org/show_bug.cgi?id=32426
Reviewed by Darin Adler.
The crash was fixed some time ago but the test was not landed which kept the bug open.
* fast/parser/crash-HTMLParser-createHead.html: Added.
Tweaked the test case as we now throw an exception (DOM Exception 12).
Modified Paths
Added Paths
Diff
Modified: trunk/LayoutTests/ChangeLog (96123 => 96124)
--- trunk/LayoutTests/ChangeLog 2011-09-27 17:06:26 UTC (rev 96123)
+++ trunk/LayoutTests/ChangeLog 2011-09-27 17:18:06 UTC (rev 96124)
@@ -1,5 +1,17 @@
2011-09-27 Julien Chaffraix <[email protected]>
+ Crash in WebCore::HTMLParser::createHead
+ https://bugs.webkit.org/show_bug.cgi?id=32426
+
+ Reviewed by Darin Adler.
+
+ The crash was fixed some time ago but the test was not landed which kept the bug open.
+
+ * fast/parser/crash-HTMLParser-createHead.html: Added.
+ Tweaked the test case as we now throw an exception (DOM Exception 12).
+
+2011-09-27 Julien Chaffraix <[email protected]>
+
Crash because CSSPrimitiveValue::computeLengthDouble assumes fontMetrics are available
https://bugs.webkit.org/show_bug.cgi?id=66291
Added: trunk/LayoutTests/fast/parser/crash-HTMLParser-createHead-expected.txt (0 => 96124)
--- trunk/LayoutTests/fast/parser/crash-HTMLParser-createHead-expected.txt (rev 0)
+++ trunk/LayoutTests/fast/parser/crash-HTMLParser-createHead-expected.txt 2011-09-27 17:18:06 UTC (rev 96124)
@@ -0,0 +1,3 @@
+Test for bug 32426: Crash in WebCore::HTMLParser::createHead
+
+This test PASSED as it did not CRASH nor ASSERTED.
Added: trunk/LayoutTests/fast/parser/crash-HTMLParser-createHead.html (0 => 96124)
--- trunk/LayoutTests/fast/parser/crash-HTMLParser-createHead.html (rev 0)
+++ trunk/LayoutTests/fast/parser/crash-HTMLParser-createHead.html 2011-09-27 17:18:06 UTC (rev 96124)
@@ -0,0 +1,15 @@
+<body _onload_=go();></body>
+<script>
+ if (window.layoutTestController)
+ layoutTestController.dumpAsText();
+
+ function go() {
+ document.open();
+ try {
+ new Image().insertAdjacentHTML(0,"<x<meta>");
+ } catch (e) {
+ }
+ document.write('<p>Test for bug <a href="" Crash in WebCore::HTMLParser::createHead</p>');
+ document.write('<p>This test PASSED as it did not CRASH nor ASSERTED.</p>');
+ }
+</script>
_______________________________________________
webkit-changes mailing list
[email protected]
http://lists.webkit.org/mailman/listinfo.cgi/webkit-changes
