third_party/WebKit/LayoutTests/svg/custom/tref-nested-events-crash.svg

   1 <?xml version="1.0" encoding="UTF-8"?>
   2 <svg onload="CFcrash()" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
   3   <!-- Test for https://bugs.webkit.org/show_bug.cgi?id=93004 -->
   4   <g id="test-body-content">
   5     <defs>
   6         <text id="hello">
   7             <tspan id="tspan">##</tspan>
   8         </text>
   9     </defs>
  10
  11     <text>
  12         <tref id="tref" xlink:href="#hello"></tref>
  13     </text>
  14   </g>
  15
  16   <text>PASS: did not crash.</text>
  17   <script>
  18     if (window.testRunner) {
  19         testRunner.waitUntilDone();
  20         testRunner.dumpAsText();
  21     }
  22
  23     var test_body_content = document.getElementById("test-body-content");
  24     var tspan = document.getElementById("tspan");
  25
  26     function CFcrash() {
  27         test_body_content.addEventListener("DOMCharacterDataModified", function () {
  28             try { test_body_content.parentNode.removeChild(test_body_content); } catch (e) {}
  29
  30             if (window.testRunner)
  31                 setTimeout('testRunner.notifyDone()', 0);
  32         }, false);
  33         document.adoptNode(tspan);
  34         if (window.testRunner)
  35             setTimeout('testRunner.notifyDone()', 10);
  36     }
  37   </script>
  38 </svg>