summaryrefslogtreecommitdiffstats
path: root/testing/web-platform/tests/css/css-text/crashtests
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-07 09:22:09 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-07 09:22:09 +0000
commit43a97878ce14b72f0981164f87f2e35e14151312 (patch)
tree620249daf56c0258faa40cbdcf9cfba06de2a846 /testing/web-platform/tests/css/css-text/crashtests
parentInitial commit. (diff)
downloadfirefox-43a97878ce14b72f0981164f87f2e35e14151312.tar.xz
firefox-43a97878ce14b72f0981164f87f2e35e14151312.zip
Adding upstream version 110.0.1.upstream/110.0.1upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'testing/web-platform/tests/css/css-text/crashtests')
-rw-r--r--testing/web-platform/tests/css/css-text/crashtests/line-break-float-crash.html26
-rw-r--r--testing/web-platform/tests/css/css-text/crashtests/rendering-rtl-bidi-override-crash.html37
-rw-r--r--testing/web-platform/tests/css/css-text/crashtests/rendering-table-caption-with-list-item-and-svg-crash.html7
-rw-r--r--testing/web-platform/tests/css/css-text/crashtests/rendering-table-caption-with-negative-margins-crash.html11
-rw-r--r--testing/web-platform/tests/css/css-text/crashtests/trailing-space-with-cr-crash.html18
-rw-r--r--testing/web-platform/tests/css/css-text/crashtests/white-space-pre-wrap-chash.html10
-rw-r--r--testing/web-platform/tests/css/css-text/crashtests/word-spacing-large-value.html14
7 files changed, 123 insertions, 0 deletions
diff --git a/testing/web-platform/tests/css/css-text/crashtests/line-break-float-crash.html b/testing/web-platform/tests/css/css-text/crashtests/line-break-float-crash.html
new file mode 100644
index 0000000000..bdf47c3e8a
--- /dev/null
+++ b/testing/web-platform/tests/css/css-text/crashtests/line-break-float-crash.html
@@ -0,0 +1,26 @@
+<!DOCTYPE html>
+<link rel="help" href="https://drafts.csswg.org/css-text-3">
+<link rel="author" title="Koji Ishii" href="mailto:kojii@chromium.org">
+<style>
+#container {
+ font-size: 100px;
+ width: 33554432px;
+}
+atomic {
+ display: inline-block;
+ width: 1ch;
+}
+left {
+ float: left;
+ width: 33554432px;
+ height: 10px;
+}
+</style>
+<body>
+ <div id="container">
+ <atomic></atomic>
+ 0
+ <left></left>
+ <span dir="ltr"><atomic></atomic></span>
+ </div>
+</body>
diff --git a/testing/web-platform/tests/css/css-text/crashtests/rendering-rtl-bidi-override-crash.html b/testing/web-platform/tests/css/css-text/crashtests/rendering-rtl-bidi-override-crash.html
new file mode 100644
index 0000000000..9ba75c9c37
--- /dev/null
+++ b/testing/web-platform/tests/css/css-text/crashtests/rendering-rtl-bidi-override-crash.html
@@ -0,0 +1,37 @@
+<!doctype html>
+<title>CSS Text Test: Crash rendering RLT text with unicode-bidi: bidi-override</title>
+<link rel="help" href="https://crbug.com/1152387">
+<script type="text/javascript">
+ function event_handler_CD7_readystatechange() {
+ document.designMode = document.designMode == "on" ? "off" : "on";
+ var oSelection=window.getSelection();
+ document.execCommand("SelectAll")
+ oSelection.collapseToEnd()
+ document.execCommand('CreateLink',false,'about:blank');
+ }
+ document.addEventListener("readystatechange", event_handler_CD7_readystatechange);
+ function event_handler_CD8_DOMCharacterDataModified() {
+ var oSelection=window.getSelection();
+ oSelection.modify('move', 'backward', 'line');
+ }
+ document.addEventListener("DOMCharacterDataModified", event_handler_CD8_DOMCharacterDataModified);
+ setTimeout(function() {
+ var oSelection=window.getSelection();
+ var oRange = oSelection.rangeCount ? oSelection.getRangeAt(68 % oSelection.rangeCount) : null;
+ var oParentElement = function() {
+ var oNewElement = document.createElementNS('http://www.w3.org/2000/svg', 'filter');
+ return oNewElement;
+ }();
+ oRange.surroundContents(oParentElement);
+ });
+</script>
+<style>
+ div {
+ unicode-bidi:bidi-override;
+ direction: rtl;
+ }
+</style>
+<div>
+AxBxC AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
+A AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
+</div>
diff --git a/testing/web-platform/tests/css/css-text/crashtests/rendering-table-caption-with-list-item-and-svg-crash.html b/testing/web-platform/tests/css/css-text/crashtests/rendering-table-caption-with-list-item-and-svg-crash.html
new file mode 100644
index 0000000000..0cc371c56d
--- /dev/null
+++ b/testing/web-platform/tests/css/css-text/crashtests/rendering-table-caption-with-list-item-and-svg-crash.html
@@ -0,0 +1,7 @@
+<!doctype html>
+<title>CSS Text Test: Crash rendering a table caption with list item and svg</title>
+<link rel="author" title="Javier Fernandez" href="mailto:jfernandez@igalia.com" />
+<link rel="help" href="https://crbug.com/1197974">
+<meta name="assert" content="The test doesn't crash in debug"/>
+<link rel="stylesheet" type="text/css" href="/fonts/ahem.css" />
+<table dir="rtl"><caption><li><svg></caption></table>
diff --git a/testing/web-platform/tests/css/css-text/crashtests/rendering-table-caption-with-negative-margins-crash.html b/testing/web-platform/tests/css/css-text/crashtests/rendering-table-caption-with-negative-margins-crash.html
new file mode 100644
index 0000000000..c090be9bbe
--- /dev/null
+++ b/testing/web-platform/tests/css/css-text/crashtests/rendering-table-caption-with-negative-margins-crash.html
@@ -0,0 +1,11 @@
+<!doctype html>
+<title>CSS Text Test: Crash rendering a table caption with empty span and negative margins</title>
+<link rel="author" title="Javier Fernandez" href="mailto:jfernandez@igalia.com" />
+<link rel="help" href="https://crbug.com/1197974">
+<meta name="assert" content="The test doesn't crash in debug"/>
+<link rel="stylesheet" type="text/css" href="/fonts/ahem.css" />
+<style>
+ table { font: 20px/1 Ahem; }
+ span { margin: -40px; }
+</style>
+<table><caption>X<span></span><input></input><textarea></textarea></caption></table>
diff --git a/testing/web-platform/tests/css/css-text/crashtests/trailing-space-with-cr-crash.html b/testing/web-platform/tests/css/css-text/crashtests/trailing-space-with-cr-crash.html
new file mode 100644
index 0000000000..48c223e352
--- /dev/null
+++ b/testing/web-platform/tests/css/css-text/crashtests/trailing-space-with-cr-crash.html
@@ -0,0 +1,18 @@
+<!DOCTYPE html>
+<link rel="help" href="https://drafts.csswg.org/css-text-3/#white-space-property">
+<link rel="author" title="Koji Ishii" href="mailto:kojii@chromium.org">
+<style>
+div {
+ width: 100px;
+ white-space: pre-wrap;
+ word-break: break-word;
+ border: 1px solid blue;
+}
+.atomic {
+ display: inline-block;
+ width: 99px;
+ height: 1em;
+ background: orange;
+}
+</style>
+<div><span class="atomic"></span>&#x0D; <span class="atomic"></span></div>
diff --git a/testing/web-platform/tests/css/css-text/crashtests/white-space-pre-wrap-chash.html b/testing/web-platform/tests/css/css-text/crashtests/white-space-pre-wrap-chash.html
new file mode 100644
index 0000000000..c34b2d0b3d
--- /dev/null
+++ b/testing/web-platform/tests/css/css-text/crashtests/white-space-pre-wrap-chash.html
@@ -0,0 +1,10 @@
+<!DOCTYPE html>
+<link rel="help" href="https://drafts.csswg.org/css-text-3/#white-space-property">
+<link rel="author" title="Javier Fernandez" href="mailto:jfernandez@igalia.com" />
+<style>
+div {
+ white-space: pre-wrap;
+ font-size: 24023in;
+}
+</style>
+<div>A A A</div>
diff --git a/testing/web-platform/tests/css/css-text/crashtests/word-spacing-large-value.html b/testing/web-platform/tests/css/css-text/crashtests/word-spacing-large-value.html
new file mode 100644
index 0000000000..cbd83fab16
--- /dev/null
+++ b/testing/web-platform/tests/css/css-text/crashtests/word-spacing-large-value.html
@@ -0,0 +1,14 @@
+<!DOCTYPE html>
+<link rel="help" href="https://drafts.csswg.org/css-text-3/#white-space-property">
+<link rel="help" href="https://bugzilla.mozilla.org/show_bug.cgi?id=1474774">
+<link rel="author" title="Mats Palmgren" href="mailto:mats@mozilla.com">
+<style>
+:last-of-type {
+ word-spacing:15946245.3ch;
+ border-right-style:solid;
+}
+</style>
+<button formaction=''>
+<small>
+AAAAAAAA
+</html>