layout/style/crashtests/456196.html
author Xianzhu Wang <wangxianzhu@chromium.org>
Tue, 05 Mar 2019 12:18:01 +0000
changeset 464575 4325ba7b38576495a78289c2a8f4dff391922e66
parent 20564 8d0e5b53857fc284f74815b9a2829e7e9535e65a
permissions -rw-r--r--
Bug 1529059 [wpt PR 15420] - [BlinkGenPropertyTrees] Initiailize double_sided of synthetic effect, a=testonly Automatic update from web-platform-tests [BlinkGenPropertyTrees] Initiailize double_sided of synthetic effect Previously synthetic effects always had double_sided==false, causing the layer disappear when the backface was facing forward. Bug: 928190 Change-Id: I35534b40346d5c5918bc99c00a4ca6b4e3b68796 Reviewed-on: https://chromium-review.googlesource.com/c/1475815 Reviewed-by: Philip Rogers <pdr@chromium.org> Commit-Queue: Xianzhu Wang <wangxianzhu@chromium.org> Cr-Commit-Position: refs/heads/master@{#632764} -- wpt-commits: a89467050deaf1dcbd9140a2f0670b1b85e518ee wpt-pr: 15420

<html>
<head>
<title>Crash [@ nsCSSValueList::~nsCSSValueList] with adding a lot of values in css property</title>
</head>
<body>
<div style="border: 1px solid black; width: 100px; height: 100px;"></div>
<script>
function forceFree() {
  var str = ' rotate(1deg)';
  for(var i=0;i<17;i++) {str += str;}
 document.getElementsByTagName('div')[0].style.MozTransform = str;  
}
setTimeout(forceFree,100);
</script>
</body>
</html>