third_party/WebKit/LayoutTests/svg/animations/svglength-element-removed-crash.svg

   1 <svg xmlns="http://www.w3.org/2000/svg" onload="load()">
   2 This test passes if it doesn't crash when run under gmalloc.
   3 <rect x="10" y="10" width="100" height="100" fill="green"/>
   4 <text x="50" y="50" id="log"/>
   5 <script>
   6 <![CDATA[
   7 function log(message) {
   8     var logDiv = document.getElementById('log');
   9     logDiv.appendChild(document.createTextNode(message));
  10 }
  11
  12 function load() {
  13     if (window.testRunner && window.GCController && window.internals)
  14         testRunner.dumpAsText();
  15     else {
  16         log("This test only works when run with the testRunner, GCController, and internals available.");
  17         return;
  18     }
  19
  20     var rect = document.getElementsByTagName("rect")[0];
  21     var baseValReference = rect.x.baseVal;
  22
  23     rect.parentNode.removeChild(rect);
  24     rect = null;
  25
  26     GCController.collect();
  27
  28     // This line will crash with gmalloc if this test has regressed.
  29     log("PASS x = " + baseValReference.value);
  30 }
  31 ]]>
  32 </script>
  33 </svg>