repo.or.cz
/
chromium-blink-merge.git
/
blob
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
log
|
graphiclog1
|
graphiclog2
|
commit
|
commitdiff
|
tree
|
refs
|
edit
|
fork
blame
|
history
|
raw
|
HEAD
Merge Chromium + Blink git repositories
[chromium-blink-merge.git]
/
third_party
/
WebKit
/
LayoutTests
/
fast
/
images
/
bad-png.html
blob
2e1bd04c636767197c13d0928fab74241deb05cd
1
<html>
2
<head>
3
<script>
4
if
(
window
.
testRunner
)
5
testRunner
.
dumpAsText
();
6
</script>
7
8
</head>
9
<body>
10
<!-- This previously tried to recursively decode the PNG, leading to heap
11
corruption when trying to unwind the stack through a member of a
12
destroyed object. -->
13
<img
src
=
"resources/bad-png.png"
>
14
<p>
PASS
</p>
15
</body>
16
</html>