third_party/WebKit/LayoutTests/accessibility/updating-attribute-in-table-causes-crash.html

   1 <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">
   2 <html>
   3 <head>
   4 <script src="../resources/js-test.js"></script>
   5 </head>
   6 <body id="body">
   7
   8 <table id="table">
   9 <tr id="row"><td id="tablecell" tabindex=0>1</td><td>2</td></tr>
  10 <tr id="row2"><td id="tablecell2" tabindex=0>1</td><td>2</td></tr>
  11 </table>
  12
  13 <p id="description"></p>
  14 <div id="console"></div>
  15
  16 <script>
  17     description("This tests for a crash that can occur while altering an attribute on a table cell because it accesses the table when its in a bad state.");
  18
  19     if (window.accessibilityController) {
  20         document.getElementById("body").focus();
  21         var body = accessibilityController.focusedElement;
  22         var tr = document.createElement("tr");
  23         var td = document.createElement("td");
  24         td.appendChild(document.createTextNode("asdf"));
  25         tr.appendChild(td);
  26
  27         // To reproduce, we need to remove a row and replace with another row, then set an attribute in the meantime.
  28         document.getElementById("table").getElementsByTagName("TBODY")[0].removeChild(document.getElementById("row2"));
  29         document.getElementById("table").getElementsByTagName("TBODY")[0].appendChild(tr);
  30         document.getElementById("tablecell").setAttribute("title", "test");
  31     }
  32
  33 </script>
  34
  35 </body>
  36 </html>