Bug 1526569 [wpt PR 15243] - [LayoutNG] Crash bug fix, a=testonly
authorAleks Totic <atotic@chromium.org>
Tue, 12 Feb 2019 14:40:50 +0000
changeset 459299 2f92effe196e0f5cda6f6216dc51a36d24083eba
parent 459298 0cee4bba6f9361fe334410b4119a16bb37de0700
child 459300 21890326fccb73b431081234a195c11b22fdf1d2
push id35557
push userdvarga@mozilla.com
push dateFri, 15 Feb 2019 01:42:08 +0000
treeherdermozilla-central@426ca85d2303 [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewerstestonly
bugs1526569, 15243, 928224, 1452506, 628948
milestone67.0a1
first release with
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
last release without
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
Bug 1526569 [wpt PR 15243] - [LayoutNG] Crash bug fix, a=testonly Automatic update from web-platform-tests [LayoutNG] Crash bug fix LayoutInline can be anonymous LayoutObject->Node() is null for anonymous layout objects. Do not dereferece Node() if null. Bug: 928224 Change-Id: I1afe05928faef0d7da52826f4cc4c3753ddddb64 Reviewed-on: https://chromium-review.googlesource.com/c/1452506 Reviewed-by: Christian Biesinger <cbiesinger@chromium.org> Commit-Queue: Aleks Totic <atotic@chromium.org> Cr-Commit-Position: refs/heads/master@{#628948} -- wpt-commits: 907716fdf200fd80322faa7f50fe665a08fc9add wpt-pr: 15243
testing/web-platform/tests/css/css-position/position-absolute-crash-chrome-001.html
new file mode 100644
--- /dev/null
+++ b/testing/web-platform/tests/css/css-position/position-absolute-crash-chrome-001.html
@@ -0,0 +1,28 @@
+<!doctype html>
+<html>
+<head>
+  <title>Chrome crash with inline </title>
+  <link rel="help" href="https://www.w3.org/TR/css-position-3/#def-cb">
+  <link rel="help" href="https://bugs.chromium.org/p/chromium/issues/detail?id=928224">
+  <script src="/resources/testharness.js"></script>
+  <script src="/resources/testharnessreport.js"></script>
+  <script>test(()=>{})</script>
+<style>
+  a {
+    position: relative;
+  }
+  a:before {
+    content: "foo";
+    position: absolute;
+    background: green;
+  }
+</style>
+</head>
+<body>
+  <div>
+    <li>
+      <a href="dummy">success if does not crash</a>
+    </li>
+  </div>
+</body>
+</html>