LayoutTests/fast/images/destroyed-image-load-event.html - WebKit - Git at Google

 <body onload="test()">
 <p>Test for <a href="https://bugs.webkit.org/show_bug.cgi?id=34490">bug 34490<a/>:
 WebCore::ImageEventSender::dispatchPendingEvents() crashes in certain conditions.</p>
 <div id="testRun"></div>
 <div id="container"></div>
 <script>
 if (window.testRunner) {
     testRunner.waitUntilDone();
     testRunner.dumpAsText();
 }

 function gc()
 {
     if (window.GCController)
         return GCController.collect();

     for (var i = 0; i < 10000; i++) { // > force garbage collection (FF requires about 9K allocations before a collect)
         var s = new String("abc");
     }
 }

 var container = document.getElementById("container");
 var testRunDiv = document.getElementById("testRun");
 var remainingTestRuns = 30;

 function test()
 {
     testRunDiv.innerHTML = remainingTestRuns;

     if (--remainingTestRuns < 0) {
         testRunDiv.innerHTML = "PASS";
         if (window.testRunner)
             testRunner.notifyDone();
         return;
     }

     container.innerHTML = '<img src="resources/boston.gif" onload="loaded1()">' +
         '<img src="resources/boston.gif" onload="loaded2()">';
 }

 function loaded1()
 {
     var img2 = document.getElementsByTagName("img")[1];
     img2.src = "";
     container.removeChild(img2);
     img2 = null;
     gc();
     setTimeout(test, 0);
 }

 function loaded2()
 {
 }
 </script>
 </body>
	<body onload="test()">
	<p>Test for <a href="https://bugs.webkit.org/show_bug.cgi?id=34490">bug 34490<a/>:
	WebCore::ImageEventSender::dispatchPendingEvents() crashes in certain conditions.</p>
	<div id="testRun"></div>
	<div id="container"></div>
	<script>
	if (window.testRunner) {
	testRunner.waitUntilDone();
	testRunner.dumpAsText();
	}

	function gc()
	{
	if (window.GCController)
	return GCController.collect();

	for (var i = 0; i < 10000; i++) { // > force garbage collection (FF requires about 9K allocations before a collect)
	var s = new String("abc");
	}
	}

	var container = document.getElementById("container");
	var testRunDiv = document.getElementById("testRun");
	var remainingTestRuns = 30;

	function test()
	{
	testRunDiv.innerHTML = remainingTestRuns;

	if (--remainingTestRuns < 0) {
	testRunDiv.innerHTML = "PASS";
	if (window.testRunner)
	testRunner.notifyDone();
	return;
	}

	container.innerHTML = '<img src="resources/boston.gif" onload="loaded1()">' +
	'<img src="resources/boston.gif" onload="loaded2()">';
	}

	function loaded1()
	{
	var img2 = document.getElementsByTagName("img")[1];
	img2.src = "";
	container.removeChild(img2);
	img2 = null;
	gc();
	setTimeout(test, 0);
	}

	function loaded2()
	{
	}
	</script>
	</body>