Add test for a multicolumn render tree update issue
authorantti@apple.com <antti@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Sat, 18 Nov 2017 17:25:28 +0000 (17:25 +0000)
committerantti@apple.com <antti@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Sat, 18 Nov 2017 17:25:28 +0000 (17:25 +0000)
https://bugs.webkit.org/show_bug.cgi?id=179860

Reviewed by Zalan Bujtas.

* fast/multicol/column-span-range-crash-expected.txt: Added.
* fast/multicol/column-span-range-crash.html: Added.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@225017 268f45cc-cd09-0410-ab3c-d52691b4dbfc

LayoutTests/ChangeLog
LayoutTests/fast/multicol/column-span-range-crash-expected.txt [new file with mode: 0644]
LayoutTests/fast/multicol/column-span-range-crash.html [new file with mode: 0644]

index 96e41d1..d9cc89a 100644 (file)
@@ -1,5 +1,15 @@
 2017-11-18  Antti Koivisto  <antti@apple.com>
 
+        Add test for a multicolumn render tree update issue
+        https://bugs.webkit.org/show_bug.cgi?id=179860
+
+        Reviewed by Zalan Bujtas.
+
+        * fast/multicol/column-span-range-crash-expected.txt: Added.
+        * fast/multicol/column-span-range-crash.html: Added.
+
+2017-11-18  Antti Koivisto  <antti@apple.com>
+
         REGRESSION (r220646): ASSERTION FAILED: skipAssert || nextSiblingRenderer(node) == m_nextSibling
         https://bugs.webkit.org/show_bug.cgi?id=179855
         <rdar://problem/35464071>
diff --git a/LayoutTests/fast/multicol/column-span-range-crash-expected.txt b/LayoutTests/fast/multicol/column-span-range-crash-expected.txt
new file mode 100644 (file)
index 0000000..8b13789
--- /dev/null
@@ -0,0 +1 @@
+
diff --git a/LayoutTests/fast/multicol/column-span-range-crash.html b/LayoutTests/fast/multicol/column-span-range-crash.html
new file mode 100644 (file)
index 0000000..640f491
--- /dev/null
@@ -0,0 +1,20 @@
+<html>
+<head>
+<style>
+set, frameset, * { columns: 1 1px }
+</style>
+<script>
+if (window.testRunner)
+    testRunner.dumpAsText();
+function boomz() {
+try { var a = document.createRange(); } catch(e) { }
+try { a.setEndBefore(b); } catch(e) { }
+try { var c = a.extractContents(); } catch(e) { }
+}
+</script>
+</head>
+<body onload=boomz()>
+<audio id="x" controls=""></audio>
+<ol id="b" style="-webkit-column-span: all;"></ol>
+</body>
+</html>