LayoutTests/fast/images/script-counter-imageDimensionChanged-crash.html

   1 <!DOCTYPE html>
   2 <html>
   3 <head>
   4 <style>
   5 div {
   6     content: url("data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAA8AAAAPAQMAAAABGAcJAAAAA1BMVEUAgACc+aWRAAAADElEQVR42mNgIAEAAAAtAAH7KhMqAAAAAElFTkSuQmCC");
   7     padding-top: 100%;
   8 }
   9
  10 body {
  11     content: counter(foobar);
  12 }
  13 </style>
  14 <script>
  15 if (window.layoutTestController)
  16     layoutTestController.dumpAsText();
  17 </script>
  18 </head>
  19 <p> Bug <a href="http://webkit.org/b/85912">85912</a>: Crash in computedCSSPadding* functions due to RenderImage::imageDimensionsChanged called during attachment</p>
  20 <p> This test PASSED if it did not crash. </p>
  21 <div>
  22 <script src="inexistant.js"></script>
  23 <body>
  24 </body>
  25 </html>