third_party/WebKit/LayoutTests/svg/text/text-layout-crash.html

   1 <!DOCTYPE html>
   2 <html>
   3 <body>
   4 <script>
   5   if (window.testRunner)
   6     testRunner.dumpAsTextWithPixelResults();
   7
   8   onload = function() {
   9     document.body.offsetTop;
  10     document.body.style.zoom=0.9;
  11
  12     document.designMode='on';
  13     window.getSelection().setBaseAndExtent(filterInFirstRoot, 0, 5);
  14     document.execCommand('ForwardDelete');
  15   }
  16 </script>
  17 This test passes if it does not crash.<br/>
  18 <svg id="111">
  19   <text direction="rtl" id="filterInFirstRoot">
  20     <tspan id="tSpanInFirstRoot">abc</tspan>
  21   </text>
  22   <path filter="url(#filterInSecondRoot)"></path>
  23 </svg>
  24 <svg id="222">
  25   <filter id="filterInSecondRoot"></filter>
  26 </svg>
  27 </body>
  28 </html>