Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 733945bf30e9c82bb6413b91c9d5c0c1c6d38809
      
https://github.com/WebKit/WebKit/commit/733945bf30e9c82bb6413b91c9d5c0c1c6d38809
  Author: fred <[email protected]>
  Date:   2026-03-11 (Wed, 11 Mar 2026)

  Changed paths:
    A 
LayoutTests/fast/block/float/floating-first-child-button-of-select-not-cleared-expected.txt
    A 
LayoutTests/fast/block/float/floating-first-child-button-of-select-not-cleared.html

  Log Message:
  -----------
  Add crash test for bug 308359
https://bugs.webkit.org/show_bug.cgi?id=309558

Reviewed by Alan Baradlay.

This adds a crash test for https://commits.webkit.org/308356@main
where a floating first child button of a select element was later
not properly cleared. This can be reproduced by tweaking the HTML
UA style sheet with the following patch and repeating execution
of the crash test several times with ASAN or Debug builds
(e.g. by passing --repeat=50 to the run-webkit-tests script).

```
diff --git a/Source/WebCore/css/html.css b/Source/WebCore/css/html.css
index 72876e45d371..80679ee16db7 100644
--- a/Source/WebCore/css/html.css
+++ b/Source/WebCore/css/html.css
@@ -1122,7 +1122,6 @@ select:not(:-internal-uses-menulist):enabled {

 select:not([multiple]):-internal-uses-menulist > button:first-child {
     all: unset;
-    display: contents;
 }

 select::picker-icon {
```

* 
LayoutTests/fast/block/float/floating-first-child-button-of-select-not-cleared-expected.txt:
 Added.
* 
LayoutTests/fast/block/float/floating-first-child-button-of-select-not-cleared.html:
 Added.

Canonical link: https://commits.webkit.org/309046@main



To unsubscribe from these emails, change your notification settings at 
https://github.com/WebKit/WebKit/settings/notifications

Reply via email to