src/third_party/WebKit/LayoutTests/fast/block/line-layout/line-break-removal-near-textarea-crash.html

   1 <!DOCTYPE html>
   2 <html>
   3 <style>
   4 .style1 { display: table-row; content: counter(section); }
   5 .style2 { position: fixed; }
   6 .style3 { vertical-align: super; -webkit-appearance: button; -webkit-column-width: 100px; }
   7 .style3:nth-of-type(2n) { display: list-item; }
   8 </style>
   9 <script>
  10 window.onload = function() {
  11     div1 = document.createElement('div');
  12     document.documentElement.appendChild(div1);
  13
  14     spanElem1 = document.createElement('span');
  15     spanElem1.setAttribute('class', 'style3');
  16     document.documentElement.appendChild(spanElem1);
  17
  18     spanElem2 = document.createElement('span');
  19     spanElem1.appendChild(spanElem2);
  20     spanElem1.appendChild(document.createTextNode('abc'));
  21
  22     textareaElem = document.createElement('textarea');
  23     textareaElem.setAttribute('class', 'style1');
  24     spanElem2.appendChild(textareaElem);
  25
  26     canvasElem = document.createElement('canvas');
  27     spanElem2.appendChild(canvasElem);
  28
  29     paragraphElem = document.createElement('p');
  30     paragraphElem.setAttribute('class', 'style2');
  31     spanElem2.appendChild(paragraphElem);
  32
  33     document.execCommand("SelectAll", false, "");
  34     window.scrollBy(-15, -48);
  35     document.documentElement.offsetHeight;
  36
  37     div1.setAttribute('class', 'style3');
  38     spanElem2.removeChild(paragraphElem);
  39
  40     if (window.testRunner)
  41         testRunner.dumpAsText();
  42 }
  43 </script>
  44 <body>
  45 PASS, if no crash or assert in debug
  46 </body>
  47 </html>