Title: [188016] trunk/LayoutTests
Revision
188016
Author
za...@apple.com
Date
2015-08-05 20:38:54 -0700 (Wed, 05 Aug 2015)

Log Message

Add missing test case (r187994).

Unreviewed.

* fast/frames/flattening/crash-when-sibling-iframe-is-destroyed-with-subtree-layoutroot-expected.txt: Added.
* fast/frames/flattening/crash-when-sibling-iframe-is-destroyed-with-subtree-layoutroot.html: Added.
* fast/frames/flattening/resources/childframe1.html: Added.
* fast/frames/flattening/resources/childframe2.html: Added.

Modified Paths

Added Paths

Diff

Modified: trunk/LayoutTests/ChangeLog (188015 => 188016)


--- trunk/LayoutTests/ChangeLog	2015-08-06 01:25:44 UTC (rev 188015)
+++ trunk/LayoutTests/ChangeLog	2015-08-06 03:38:54 UTC (rev 188016)
@@ -1,3 +1,14 @@
+2015-08-05  Zalan Bujtas  <za...@apple.com>
+
+        Add missing test case (r187994).
+
+        Unreviewed.
+
+        * fast/frames/flattening/crash-when-sibling-iframe-is-destroyed-with-subtree-layoutroot-expected.txt: Added.
+        * fast/frames/flattening/crash-when-sibling-iframe-is-destroyed-with-subtree-layoutroot.html: Added.
+        * fast/frames/flattening/resources/childframe1.html: Added.
+        * fast/frames/flattening/resources/childframe2.html: Added.
+
 2015-08-05  Chris Dumez  <cdu...@apple.com>
 
         Crash when removing children of a MathMLSelectElement

Added: trunk/LayoutTests/fast/frames/flattening/crash-when-sibling-iframe-is-destroyed-with-subtree-layoutroot-expected.txt (0 => 188016)


--- trunk/LayoutTests/fast/frames/flattening/crash-when-sibling-iframe-is-destroyed-with-subtree-layoutroot-expected.txt	                        (rev 0)
+++ trunk/LayoutTests/fast/frames/flattening/crash-when-sibling-iframe-is-destroyed-with-subtree-layoutroot-expected.txt	2015-08-06 03:38:54 UTC (rev 188016)
@@ -0,0 +1 @@
+PASSED

Added: trunk/LayoutTests/fast/frames/flattening/crash-when-sibling-iframe-is-destroyed-with-subtree-layoutroot.html (0 => 188016)


--- trunk/LayoutTests/fast/frames/flattening/crash-when-sibling-iframe-is-destroyed-with-subtree-layoutroot.html	                        (rev 0)
+++ trunk/LayoutTests/fast/frames/flattening/crash-when-sibling-iframe-is-destroyed-with-subtree-layoutroot.html	2015-08-06 03:38:54 UTC (rev 188016)
@@ -0,0 +1,37 @@
+<!DOCTYPE html>
+<html>
+<head>
+<title>This tests if subtree layout crashes when the tree is mutated while the document is being destroyed.</title>
+<script>
+  if (window.testRunner) {
+    testRunner.dumpAsText();
+    testRunner.waitUntilDone();
+  }
+
+  if (window.internals)
+    internals.settings.setFrameFlatteningEnabled(true);
+
+  window._onload_ = function() {
+    if (location.hash == "#1") {
+	  document.body.innerHTML = "PASSED";
+      if (window.testRunner)
+        testRunner.notifyDone();
+    } else {
+      location.hash = "#1";
+	  setTimeout( function() { window.location.reload(); }, 0 );
+    }
+  }
+
+  window._onpagehide_ = function () {
+    var frame2 = document.getElementById("frame2"); 
+    frame2.style.padding = "20px"; 
+    frame2.contentDocument.getElementById("frame2textcontrol").innerText = "new text";
+  }
+</script>
+</head>
+<body>
+<iframe id=frame1 src=""
+<iframe id=frame2 src=""
+<div id=mainframediv></div>
+</body>
+</html>
\ No newline at end of file

Added: trunk/LayoutTests/fast/frames/flattening/resources/childframe1.html (0 => 188016)


--- trunk/LayoutTests/fast/frames/flattening/resources/childframe1.html	                        (rev 0)
+++ trunk/LayoutTests/fast/frames/flattening/resources/childframe1.html	2015-08-06 03:38:54 UTC (rev 188016)
@@ -0,0 +1,7 @@
+<script>
+window._onpagehide_ = function () { 
+  var mainframediv = parent.document.getElementById("mainframediv");
+  mainframediv.style.padding = "30px";
+  mainframediv.offsetWidth;
+} 
+</script>
\ No newline at end of file

Added: trunk/LayoutTests/fast/frames/flattening/resources/childframe2.html (0 => 188016)


--- trunk/LayoutTests/fast/frames/flattening/resources/childframe2.html	                        (rev 0)
+++ trunk/LayoutTests/fast/frames/flattening/resources/childframe2.html	2015-08-06 03:38:54 UTC (rev 188016)
@@ -0,0 +1 @@
+<textarea id=frame2textcontrol>child frame 2</textarea>
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to