Skip to content
Newer
Older
100644 38 lines (34 sloc) 1.08 KB
660edfe Source/WebCore: WebCore part of <rdar://problem/8441312> Crash in -[N…
mitz@apple.com authored Jan 15, 2011
1 <style>
2 div { padding: 10px; margin: 8px; }
3 embed { width: 50px; height: 50px; }
4 iframe { width: 50px; height: 50px; }
5 </style>
6 <script>
7 var callCount = 0;
8
9 function hideFirst()
10 {
11 if (++callCount != 2)
12 return;
13
14 var target = document.getElementById("target");
15 if (!target)
16 return;
17
18 target.parentNode.removeChild(target);
19 document.body.offsetTop;
20 }
21 </script>
22 <p>
23 Test that plug-ins cannot cause the NSView hierarchy to change beneath <tt>-[NSView _invalidateGStatesForTree]</tt>.
24 </p>
25 <p>
26 To test, resize the browser window. Reload and repeat a few times. Each time you resize, the orange rectangle and
27 its contents should vanish, and the browser should not crash.
28 </p>
29 <div id="target" style="border: solid orange;">
30 <embed type="application/x-webkit-test-netscape"></embed>
31 <iframe src=""></iframe>
32 <iframe src=""></iframe>
33 <iframe src=""></iframe>
34 </div>
35 <div style="border: solid blue;">
36 <embed type="application/x-webkit-test-netscape" onsetwindow="hideFirst()"></embed>
37 </div>
Something went wrong with that request. Please try again.