third_party/WebKit/LayoutTests/svg/custom/font-platformDestroy-crash.svg

   1 <?xml version="1.0" encoding="UTF-8"?>
   2 <!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1 Tiny//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11-tiny.dtd">
   3
   4 <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" id="svg-root" width="100%" height="100%" viewBox="0 0 480 360">
   5     <style id="style">
   6         text { }
   7     </style>
   8     <g id="test-body-content" font-size="10">
   9         <defs>
  10         <font id="embeded" horiz-adv-x="224">
  11 <font-face font-family="embeded" units-per-em="1000" panose-1="0 0 0 0 0 0 0 0 0 0" ascent="917" descent="-250" alphabetic="0"/>
  12             <glyph unicode="1" glyph-name="gl_1" horiz-adv-x="1500" d="M 0 0 L 250 0 L 250 250 L 0 250 Z"/>
  13         </font>
  14         </defs>
  15
  16         <g transform="translate(100, 40)">
  17             <text font-family="embeded">1</text>
  18         </g>
  19         <g transform="translate(100, 60)">
  20             <text>Test for http://bugs.webkit.org/show_bug.cgi?id=16967</text>
  21         </g>
  22     </g>
  23
  24     <script><![CDATA[
  25         if (window.testRunner)
  26             testRunner.dumpAsText();
  27
  28         var style = document.getElementById("style");
  29         var parent = style.parentNode;
  30
  31         for (var t = 0; t < 50; t++) {
  32             parent.offsetTop;
  33             parent.removeChild(style);
  34             parent.appendChild(style);
  35         }
  36     ]]></script>
  37 </svg>