diff options
| author | bdash <bdash@bbb929c8-8fbe-4397-9dbb-9b2b20218538> | 2007-01-02 01:42:45 +0000 |
|---|---|---|
| committer | bdash <bdash@bbb929c8-8fbe-4397-9dbb-9b2b20218538> | 2007-01-02 01:42:45 +0000 |
| commit | 2460ea6449c9c532b6a8029ea00b4102697fd372 (patch) | |
| tree | 0be8ba0ff922c694ac1be8385f76c96ca72f6c54 /third_party/WebKit/LayoutTests/fast/css-generated-content/reset-content-to-initial.html | |
| parent | 19473e5d638b2aa9e99909b3b038b39689c67033 (diff) | |
| download | chromium_src-2460ea6449c9c532b6a8029ea00b4102697fd372.zip chromium_src-2460ea6449c9c532b6a8029ea00b4102697fd372.tar.gz chromium_src-2460ea6449c9c532b6a8029ea00b4102697fd372.tar.bz2 | |
2007-01-01 Mark Rowe <bdash@webkit.org>
Reviewed by Eric.
http://bugs.webkit.org/show_bug.cgi?id=12061
Bug 12061: Crash in WebCore::Shared<WebCore::StringImpl>::deref
* rendering/RenderStyle.cpp:
(WebCore::ContentData::clearContent): Reset _contentType to CONTENT_NONE to ensure repeated calls to clearContent
do not result in derefing deallocated members.
2007-01-01 Mark Rowe <bdash@webkit.org>
Reviewed by Eric.
Layout test for http://bugs.webkit.org/show_bug.cgi?id=12061
Bug 12061: Crash in WebCore::Shared<WebCore::StringImpl>::deref
* fast/css-generated-content/reset-content-to-initial-expected.txt: Added.
* fast/css-generated-content/reset-content-to-initial.html: Added.
git-svn-id: svn://svn.chromium.org/blink/trunk@18510 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Diffstat (limited to 'third_party/WebKit/LayoutTests/fast/css-generated-content/reset-content-to-initial.html')
| -rw-r--r-- | third_party/WebKit/LayoutTests/fast/css-generated-content/reset-content-to-initial.html | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/third_party/WebKit/LayoutTests/fast/css-generated-content/reset-content-to-initial.html b/third_party/WebKit/LayoutTests/fast/css-generated-content/reset-content-to-initial.html new file mode 100644 index 0000000..8c35525 --- /dev/null +++ b/third_party/WebKit/LayoutTests/fast/css-generated-content/reset-content-to-initial.html @@ -0,0 +1,17 @@ +<html> +<head> + <title>Test HTML Page</title> + <style type="text/css"> + dfn { content: "text"; content: initial; } + </style> + <script type="text/javascript"> + if (window.layoutTestController) + layoutTestController.dumpAsText(); + </script> +</head> +<body> + <p>Test for <a href="http://bugs.webkit.org/show_bug.cgi?id=12061">bug 12061</a>.</p> + <p>PASS: If this doesn't crash, the test has succeeded.</p> + <dfn>dfn</dfn> +</body> +</html> |