third_party/WebKit/LayoutTests/editing/text-iterator/rtl-first-letter-text-iterator-crash.html

   1 <style>
   2   #el0 {
   3     visibility: collapse;
   4   }
   5   #el1::first-letter {
   6     height: 1;
   7 </style>
   8 <script>
   9 if (window.testRunner) {
  10     testRunner.dumpAsText();
  11     testRunner.waitUntilDone();
  12 }
  13
  14 function crash(){
  15     el0=document.createElement('div')
  16     document.body.appendChild(el0)
  17     el0.setAttribute('id','el0')
  18     el1=document.createElement('div')
  19     document.body.appendChild(el1)
  20     el1.setAttribute('id','el1')
  21     el0.appendChild(document.createTextNode(unescape(Array(40).join('A')+'%ufed5')));
  22     el1.appendChild(document.createTextNode(unescape('A%u074b')));
  23     document.body.offsetTop;
  24     setTimeout(function () {
  25         document.body.innerHTML = "PASS. WebKit didn't crash.";
  26         testRunner.notifyDone();
  27     }, 0);
  28 }
  29 window.scrollTop;
  30 window.onload=crash
  31 </script>