third_party/WebKit/LayoutTests/fast/text/text-iterator-crash.html

   1 <!DOCTYPE html>
   2 <script>
   3 if (window.testRunner)
   4   testRunner.dumpAsText();
   5
   6 window.onload = function() {
   7   document.getElementById('object').appendChild(document.getElementById('meta'));
   8   document.execCommand('FindString', 'test');
   9 };
  10 </script>
  11 <style>
  12   caption:first-line { visibility: hidden; }
  13   caption:first-letter { color: red; }
  14 </style>
  15 <p>
  16   The test passes if it does not CRASH in debug builds.
  17   <meta id="meta"/>
  18   <object id="object">
  19     <table>
  20       <caption dir="rtl">
  21         )TQ?
  22       </caption>
  23     </table>
  24   </object>
  25 </p>
  26 <p></p>