Title: [225670] trunk/LayoutTests
- Revision
- 225670
- Author
- [email protected]
- Date
- 2017-12-07 20:50:48 -0800 (Thu, 07 Dec 2017)
Log Message
iOS: Many AMP pages hit a release assertion inside Document::updateStyleIfNeeded
https://bugs.webkit.org/show_bug.cgi?id=180550
Reviewed by Simon Fraser.
Add a test for r225647.
* fast/frames/flattening/non-flattening-frame-inside-flattening-iframe-crash-expected.txt: Added.
* fast/frames/flattening/non-flattening-frame-inside-flattening-iframe-crash.html: Added.
Modified Paths
Added Paths
Diff
Modified: trunk/LayoutTests/ChangeLog (225669 => 225670)
--- trunk/LayoutTests/ChangeLog 2017-12-08 04:22:47 UTC (rev 225669)
+++ trunk/LayoutTests/ChangeLog 2017-12-08 04:50:48 UTC (rev 225670)
@@ -1,3 +1,15 @@
+2017-12-07 Ryosuke Niwa <[email protected]>
+
+ iOS: Many AMP pages hit a release assertion inside Document::updateStyleIfNeeded
+ https://bugs.webkit.org/show_bug.cgi?id=180550
+
+ Reviewed by Simon Fraser.
+
+ Add a test for r225647.
+
+ * fast/frames/flattening/non-flattening-frame-inside-flattening-iframe-crash-expected.txt: Added.
+ * fast/frames/flattening/non-flattening-frame-inside-flattening-iframe-crash.html: Added.
+
2017-12-07 Eric Carlson <[email protected]>
Simplify log channel configuration UI
Added: trunk/LayoutTests/fast/frames/flattening/non-flattening-frame-inside-flattening-iframe-crash-expected.txt (0 => 225670)
--- trunk/LayoutTests/fast/frames/flattening/non-flattening-frame-inside-flattening-iframe-crash-expected.txt (rev 0)
+++ trunk/LayoutTests/fast/frames/flattening/non-flattening-frame-inside-flattening-iframe-crash-expected.txt 2017-12-08 04:50:48 UTC (rev 225670)
@@ -0,0 +1,3 @@
+This tests that WebKit doesn't crash when there is an non-flattened iframe inside a flattened iframe.
+
+PASS. WebKit did not crash.
Added: trunk/LayoutTests/fast/frames/flattening/non-flattening-frame-inside-flattening-iframe-crash.html (0 => 225670)
--- trunk/LayoutTests/fast/frames/flattening/non-flattening-frame-inside-flattening-iframe-crash.html (rev 0)
+++ trunk/LayoutTests/fast/frames/flattening/non-flattening-frame-inside-flattening-iframe-crash.html 2017-12-08 04:50:48 UTC (rev 225670)
@@ -0,0 +1,35 @@
+<!DOCTYPE html>
+<html>
+<body>
+<p>This tests that WebKit doesn't crash when there is an non-flattened iframe inside a flattened iframe.</p>
+<div id="container"></div>
+<script>
+
+if (window.testRunner && window.internals) {
+ testRunner.dumpAsText();
+ internals.settings.setFrameFlattening("FullyEnabled");
+}
+
+const container = document.getElementById('container');
+const outerIFrame = document.createElement('iframe');
+container.appendChild(outerIFrame);
+
+const innerIFrame = document.createElement('iframe');
+innerIFrame.setAttribute('scrolling', 'no');
+innerIFrame.style.width = '100px';
+innerIFrame.style.height = '100px';
+
+outerIFrame.contentDocument.body.appendChild(innerIFrame);
+
+let content = '';
+for (let i = 0; i < 50; i++)
+ content += `some text ${i}<br>`;
+
+innerIFrame.contentDocument.body.innerHTML = content;
+
+document.body.getBoundingClientRect();
+container.textContent = 'PASS. WebKit did not crash.';
+
+</script>
+</body>
+</html>
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
