Bug 1769676 [wpt PR 34089] - Fix null READ when calling getKeyframes on an orphaned element, a=testonly
authorKevin Ellis <kevers@google.com>
Wed, 18 May 2022 03:35:37 +0000
changeset 618486 16c34513bc8212eda77b59a2859f92ff7904df7e
parent 618485 5854ad46ad9b37fa294ce704f71cac3eca8805c5
child 618487 14982ab8e0b25d663bead4e381ebec4b125cd06a
push id163295
push userwptsync@mozilla.com
push dateSun, 22 May 2022 08:42:45 +0000
treeherderautoland@28d8297085fe [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewerstestonly
bugs1769676, 34089, 1326225, 3649496, 1004364
milestone102.0a1
first release with
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
last release without
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
Bug 1769676 [wpt PR 34089] - Fix null READ when calling getKeyframes on an orphaned element, a=testonly Automatic update from web-platform-tests Fix null READ when calling getKeyframes on an orphaned element Values of CSS properties are resolved when retrieving keyframes. This resolution triggered a DCHECK failure if the effects target was orphaned since it would not have a computed style. Bug: 1326225 Change-Id: Ie60eff021a215baf41503d47a056903ff39ce018 Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3649496 Commit-Queue: Kevin Ellis <kevers@chromium.org> Reviewed-by: Anders Hartvoll Ruud <andruud@chromium.org> Cr-Commit-Position: refs/heads/main@{#1004364} -- wpt-commits: ee5f3c9979f0d1fffd6eadaa79f5228f0b3570ea wpt-pr: 34089
testing/web-platform/tests/css/css-animations/CSSAnimation-getKeyframes-crash.html
new file mode 100644
--- /dev/null
+++ b/testing/web-platform/tests/css/css-animations/CSSAnimation-getKeyframes-crash.html
@@ -0,0 +1,26 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <link rel="help" href="https://crbug.com/1326225">
+  <title>Crash test calling getKeyframes on an orphaned element</title>
+</head>
+<style type="text/css">
+  @keyframes anim {
+    from { left: 0; }
+  }
+</style>
+<body>
+  <div id="container">
+    <div id="target">
+    </div>
+  </div>
+</body>
+<script type="text/javascript">
+  target.style.animation = "anim 0.01s";
+  var animation = target.getAnimations()[0];
+  container.innerHTML = 1;
+  animation.effect.getKeyframes()[0].hasOwnProperty();
+</script>
+</html>