diff options
| author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-07 09:22:09 +0000 |
|---|---|---|
| committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-07 09:22:09 +0000 |
| commit | 43a97878ce14b72f0981164f87f2e35e14151312 (patch) | |
| tree | 620249daf56c0258faa40cbdcf9cfba06de2a846 /testing/web-platform/tests/css/css-transforms/crashtests | |
| parent | Initial commit. (diff) | |
| download | firefox-43a97878ce14b72f0981164f87f2e35e14151312.tar.xz firefox-43a97878ce14b72f0981164f87f2e35e14151312.zip | |
Adding upstream version 110.0.1.upstream/110.0.1upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'testing/web-platform/tests/css/css-transforms/crashtests')
16 files changed, 236 insertions, 0 deletions
diff --git a/testing/web-platform/tests/css/css-transforms/crashtests/large-scale3d-001.html b/testing/web-platform/tests/css/css-transforms/crashtests/large-scale3d-001.html new file mode 100644 index 0000000000..e14d89bd7c --- /dev/null +++ b/testing/web-platform/tests/css/css-transforms/crashtests/large-scale3d-001.html @@ -0,0 +1,10 @@ +<!doctype html> +<meta charset="utf-8"> +<link rel="author" href="mailto:0xdevssh@gmail.com"> +<link rel="help" href="https://crbug.com/1246754"> +<div id="test"> +</div> + +<script> + document.getElementById('test').style['transform']='scale3d(0.27729718037880957e1857, 0.27729718037880957e1857, 0.27729718037880957e1857)'; +</script>
\ No newline at end of file diff --git a/testing/web-platform/tests/css/css-transforms/crashtests/large-scaley-001.html b/testing/web-platform/tests/css/css-transforms/crashtests/large-scaley-001.html new file mode 100644 index 0000000000..8c3cdeb3e6 --- /dev/null +++ b/testing/web-platform/tests/css/css-transforms/crashtests/large-scaley-001.html @@ -0,0 +1,11 @@ +<!DOCTYPE HTML> +<title>CSS Test (Transforms): Transform with large scaleY()</title> +<link rel="author" title="Philip Rogers" href="mailto:pdr@google.com"> +<link rel="author" title="L. David Baron" href="https://dbaron.org/"> +<link rel="author" title="Google" href="http://www.google.com/"> +<link rel="help" href="https://bugs.chromium.org/p/chromium/issues/detail?id=1230937"> +<link rel="help" href="https://drafts.csswg.org/css-transforms-1/#two-d-transform-functions"> +<meta name="assert" content="This should not crash."> + +<div style="transform: scaley(99e99);">a</div> +<div style="mix-blend-mode: saturation;">a</div> diff --git a/testing/web-platform/tests/css/css-transforms/crashtests/preserve3d-containing-block-inline-001.html b/testing/web-platform/tests/css/css-transforms/crashtests/preserve3d-containing-block-inline-001.html new file mode 100644 index 0000000000..3be0af34cf --- /dev/null +++ b/testing/web-platform/tests/css/css-transforms/crashtests/preserve3d-containing-block-inline-001.html @@ -0,0 +1,9 @@ +<!DOCTYPE HTML> +<html style="columns: 1"> +<title>CSS Test (Transforms): preserve-3d, inlines, and being a containing block</title> +<link rel="author" title="L. David Baron" href="https://dbaron.org/"> +<link rel="author" title="Google" href="http://www.google.com/"> +<link rel="help" href="https://bugs.chromium.org/p/chromium/issues/detail?id=1226287"> +<meta name="assert" content="This should not crash."> + +<span style="transform-style: preserve-3d"><span style="position: absolute"></span></span> diff --git a/testing/web-platform/tests/css/css-transforms/crashtests/preserve3d-containing-block-inline-002.html b/testing/web-platform/tests/css/css-transforms/crashtests/preserve3d-containing-block-inline-002.html new file mode 100644 index 0000000000..163e977a91 --- /dev/null +++ b/testing/web-platform/tests/css/css-transforms/crashtests/preserve3d-containing-block-inline-002.html @@ -0,0 +1,8 @@ +<!DOCTYPE HTML> +<title>CSS Test (Transforms): preserve-3d, inlines, and being a containing block</title> +<link rel="author" title="L. David Baron" href="https://dbaron.org/"> +<link rel="author" title="Google" href="http://www.google.com/"> +<link rel="help" href="https://bugs.chromium.org/p/chromium/issues/detail?id=1226287"> +<meta name="assert" content="This should not crash."> + +<span style="transform-style: preserve-3d"><span style="position: absolute"></span></span> diff --git a/testing/web-platform/tests/css/css-transforms/crashtests/preserve3d-containing-br-001.html b/testing/web-platform/tests/css/css-transforms/crashtests/preserve3d-containing-br-001.html new file mode 100644 index 0000000000..869a3a0c7a --- /dev/null +++ b/testing/web-platform/tests/css/css-transforms/crashtests/preserve3d-containing-br-001.html @@ -0,0 +1,11 @@ +<!DOCTYPE html> +<title>CSS Test (Transforms): preserve-3d containing a br</title> +<link rel="author" title="L. David Baron" href="https://dbaron.org/"> +<link rel="author" title="Google" href="http://www.google.com/"> +<link rel="help" href="https://bugs.chromium.org/p/chromium/issues/detail?id=1275856"> +<link rel="help" href="https://drafts.csswg.org/css-transforms-2/#transform-style-property"> +<meta name="assert" content="This should not crash."> + +<div style="transform-style: preserve-3d"> + <br> +</div> diff --git a/testing/web-platform/tests/css/css-transforms/crashtests/preserve3d-containing-br-002.html b/testing/web-platform/tests/css/css-transforms/crashtests/preserve3d-containing-br-002.html new file mode 100644 index 0000000000..8c9e0dc10c --- /dev/null +++ b/testing/web-platform/tests/css/css-transforms/crashtests/preserve3d-containing-br-002.html @@ -0,0 +1,11 @@ +<!DOCTYPE html> +<title>CSS Test (Transforms): preserve-3d containing a br</title> +<link rel="author" title="L. David Baron" href="https://dbaron.org/"> +<link rel="author" title="Google" href="http://www.google.com/"> +<link rel="help" href="https://bugs.chromium.org/p/chromium/issues/detail?id=1276151"> +<link rel="help" href="https://drafts.csswg.org/css-transforms-2/#transform-style-property"> +<meta name="assert" content="This should not crash."> + +<div style="transform-style: preserve-3d; column-count: 128"> + <br> +</div> diff --git a/testing/web-platform/tests/css/css-transforms/crashtests/preserve3d-inline-hit-test.html b/testing/web-platform/tests/css/css-transforms/crashtests/preserve3d-inline-hit-test.html new file mode 100644 index 0000000000..b00dbc839e --- /dev/null +++ b/testing/web-platform/tests/css/css-transforms/crashtests/preserve3d-inline-hit-test.html @@ -0,0 +1,9 @@ +<!DOCTYPE HTML> +<title>CSS Test (Transforms): preserve-3d on inline and hit test</title> +<link rel="help" href="https://drafts.csswg.org/css-transforms-2/#transform-style-property"> +<link rel="help" href="https://bugs.chromium.org/p/chromium/issues/detail?id=1127348"> +<meta name="assert" content="This should not crash."> +<span style="transform-style: preserve-3d; position: relative">TEST</span> +<script> +document.elementFromPoint(10, 10); +</script> diff --git a/testing/web-platform/tests/css/css-transforms/crashtests/preserve3d-scene-001.html b/testing/web-platform/tests/css/css-transforms/crashtests/preserve3d-scene-001.html new file mode 100644 index 0000000000..1bb1091acf --- /dev/null +++ b/testing/web-platform/tests/css/css-transforms/crashtests/preserve3d-scene-001.html @@ -0,0 +1,32 @@ +<!DOCTYPE HTML> +<title>CSS Test (Transforms): Very large values in matrix3d()</title> +<link rel="author" title="L. David Baron" href="https://dbaron.org/"> +<link rel="author" title="Google" href="http://www.google.com/"> +<link rel="help" href="https://bugs.chromium.org/p/chromium/issues/detail?id=1224066"> +<meta name="assert" content="This should not crash."> +<style> + +.outer { + column-count:16384; + -webkit-mask-box-image: url('?') 10% 90% repeat; +} + +.middle { + -webkit-transform-style:preserve-3d; + display:list-item; +} + +table { + height:7.1px; + padding-right:4em; + transform:matrix3d(0,7.8,+9,+2,-3.6,3.4,6,8.8,9.5,7,7.3,5.3,6.4,3.7,8.3,8); + border-left: medium black solid; +} + +tbody { + font:icon; +} + +</style> + +<div class="outer"><div class="middle"><table> diff --git a/testing/web-platform/tests/css/css-transforms/crashtests/preserve3d-scene-002.html b/testing/web-platform/tests/css/css-transforms/crashtests/preserve3d-scene-002.html new file mode 100644 index 0000000000..7f0ca6a117 --- /dev/null +++ b/testing/web-platform/tests/css/css-transforms/crashtests/preserve3d-scene-002.html @@ -0,0 +1,26 @@ +<!DOCTYPE html> +<style> + +.outer { + column-count:16384; + -webkit-mask-box-image:url('?') 10% 90% repeat; +} +button { + font:icon; +} +.inner { + border-top:solid 1000000000px; + transform-style:preserve-3d; + display:list-item; +} +table { + height:7.1px; + padding-right:4em; + transform:matrix3d(0,7.8,9,2,-3.6,3.4,6,8.8,9.5,7,7.3,5.3,6.4,3.7,8.3,8); + border-left:outset black; + font-size:120%; +} + +</style> + +<div class="outer"><button><div class="inner"><table border></table></div></button></div> diff --git a/testing/web-platform/tests/css/css-transforms/crashtests/preserve3d-svg-foreign-object-hit-test.svg b/testing/web-platform/tests/css/css-transforms/crashtests/preserve3d-svg-foreign-object-hit-test.svg new file mode 100644 index 0000000000..14c772cb2d --- /dev/null +++ b/testing/web-platform/tests/css/css-transforms/crashtests/preserve3d-svg-foreign-object-hit-test.svg @@ -0,0 +1,20 @@ +<svg xmlns="http://www.w3.org/2000/svg" xmlns:html="http://www.w3.org/1999/xhtml"> +<g id="testmeta"> + <title>CSS Test (Transforms): preserve-3d on foreignObject and hit test</title> + <html:link rel="help" href="https://drafts.csswg.org/css-transforms-2/#transform-style-property" /> + <html:link rel="help" href="https://bugs.chromium.org/p/chromium/issues/detail?id=1277221" /> + <html:meta name="assert" content="This should not crash." /> +</g> + +<style> +foreignObject { + display:table; + overflow:auto; + transform-style:preserve-3d; +} +</style> +<foreignObject width="200" height="200"></foreignObject> +<script> +document.elementFromPoint(100, 100); +</script> +</svg> diff --git a/testing/web-platform/tests/css/css-transforms/crashtests/transform-marquee-resize-div-image-001.html b/testing/web-platform/tests/css/css-transforms/crashtests/transform-marquee-resize-div-image-001.html new file mode 100644 index 0000000000..8bdbb984f3 --- /dev/null +++ b/testing/web-platform/tests/css/css-transforms/crashtests/transform-marquee-resize-div-image-001.html @@ -0,0 +1,8 @@ +<!DOCTYPE HTML> +<title>CSS Test (Transforms): Transform and marquee with resize, etc.</title> +<link rel="author" title="L. David Baron" href="https://dbaron.org/"> +<link rel="author" title="Google" href="http://www.google.com/"> +<link rel="help" href="https://bugs.chromium.org/p/chromium/issues/detail?id=1226919"> +<meta name="assert" content="This should not crash."> + +<body style="transform: scalex(0.9)"><marquee style="resize: both"><div><img src="../not-found.png"> diff --git a/testing/web-platform/tests/css/css-transforms/crashtests/w-crossing-zero-001.html b/testing/web-platform/tests/css/css-transforms/crashtests/w-crossing-zero-001.html new file mode 100644 index 0000000000..64ba0e85f2 --- /dev/null +++ b/testing/web-platform/tests/css/css-transforms/crashtests/w-crossing-zero-001.html @@ -0,0 +1,21 @@ +<!DOCTYPE HTML> +<title>CSS Test (Transforms): Transform with w crossing zero</title> +<link rel="author" title="L. David Baron" href="https://dbaron.org/"> +<link rel="author" title="Google" href="http://www.google.com/"> +<link rel="help" href="https://bugs.chromium.org/p/chromium/issues/detail?id=1230937"> +<link rel="help" href="https://drafts.csswg.org/css-transforms-2/#processing-of-perspective-transformed-boxes"> +<meta name="assert" content="This should not crash."> + +<style> +#outer { + transform-style: preserve-3d; +} +#inner { + transform: matrix3d(4,947066.75,3,-57.374,1860.6956175,97,2291.191,-8.1785,9,46.047,5.02880,7.198084,2,8,2009,3.2); + border: medium solid; +} +</style> +<div id="outer"> + <div id="inner"> + </div> +</div> diff --git a/testing/web-platform/tests/css/css-transforms/crashtests/w-negative-001.html b/testing/web-platform/tests/css/css-transforms/crashtests/w-negative-001.html new file mode 100644 index 0000000000..d2d5e968d6 --- /dev/null +++ b/testing/web-platform/tests/css/css-transforms/crashtests/w-negative-001.html @@ -0,0 +1,17 @@ +<!DOCTYPE html> +<title>CSS Test (Transforms): Transform and perspective with w negative</title> +<link rel="author" title="L. David Baron" href="https://dbaron.org/"> +<link rel="author" title="Google" href="http://www.google.com/"> +<link rel="help" href="https://bugs.chromium.org/p/chromium/issues/detail?id=455874"> +<link rel="help" href="https://drafts.csswg.org/css-transforms-2/#processing-of-perspective-transformed-boxes"> +<meta name="assert" content="This should not crash."> + +<style> +* { + transform: perspective(142176px); + mix-blend-mode: darken; + transform-origin: left center 537763.2px; +} +</style> +<hr size="1425"></hr> +<button autofocus></button> diff --git a/testing/web-platform/tests/css/css-transforms/crashtests/w-negative-002.html b/testing/web-platform/tests/css/css-transforms/crashtests/w-negative-002.html new file mode 100644 index 0000000000..a485880f49 --- /dev/null +++ b/testing/web-platform/tests/css/css-transforms/crashtests/w-negative-002.html @@ -0,0 +1,14 @@ +<!DOCTYPE HTML> +<title>CSS Test (Transforms): Transform and perspective with w negative</title> +<link rel="author" title="L. David Baron" href="https://dbaron.org/"> +<link rel="author" title="Google" href="http://www.google.com/"> +<link rel="help" href="https://bugs.chromium.org/p/chromium/issues/detail?id=1173218"> +<link rel="help" href="https://drafts.csswg.org/css-transforms-2/#processing-of-perspective-transformed-boxes"> +<meta name="assert" content="This should not crash."> + +<style> +html, body { perspective: 9px } +body, div { transform: translateZ(14px) } +div { filter: hue-rotate(6deg) } +</style> +<div>x</div> diff --git a/testing/web-platform/tests/css/css-transforms/crashtests/w-negative-003.html b/testing/web-platform/tests/css/css-transforms/crashtests/w-negative-003.html new file mode 100644 index 0000000000..9c4cf77e36 --- /dev/null +++ b/testing/web-platform/tests/css/css-transforms/crashtests/w-negative-003.html @@ -0,0 +1,15 @@ +<!DOCTYPE HTML> +<title>CSS Test (Transforms): Transform and perspective with w negative</title> +<link rel="author" title="L. David Baron" href="https://dbaron.org/"> +<link rel="author" title="Google" href="http://www.google.com/"> +<link rel="help" href="https://bugs.chromium.org/p/chromium/issues/detail?id=1229117"> +<link rel="help" href="https://drafts.csswg.org/css-transforms-2/#processing-of-perspective-transformed-boxes"> +<meta name="assert" content="This should not crash."> + +<style> +button { + transform:translate3d(1866px, 1794px, 1359px) perspective(848px); + clip-path: ellipse(822px 405px); +} +</style> +<button autofocus='true'></button> diff --git a/testing/web-platform/tests/css/css-transforms/crashtests/zero-perspective-001.html b/testing/web-platform/tests/css/css-transforms/crashtests/zero-perspective-001.html new file mode 100644 index 0000000000..923794ed60 --- /dev/null +++ b/testing/web-platform/tests/css/css-transforms/crashtests/zero-perspective-001.html @@ -0,0 +1,14 @@ +<!doctype html> +<meta charset="utf-8"> +<link rel="help" href="https://bugzilla.mozilla.org/show_bug.cgi?id=1772640"> +<div id="test"> +<style> +* { + overflow-x: scroll; + perspective: 0px; +} +#a { + rotate: 1deg 0 1 0; +} +</style> +<ul id="a">IjzXS</ul> |
