LayoutTests/fast/css/css-keyframe-style-crash.html - WebKit - Git at Google

 <html>
 <head>
 <script>
 if (window.layoutTestController) {
     layoutTestController.dumpAsText();
     layoutTestController.waitUntilDone();
 }

 if (!window.gc)
 {
     window.gc = function()
     {
         if (window.GCController)
             return GCController.collect();
         for (var i = 0; i < 10000; i++)
             var s = new String("abc");
     }
 }

 function load()
 {
     style = document.createElement('style');
     style.textContent = '@-webkit-keyframes anim { from { color: green } }';
     document.head.appendChild(style);
     rule = document.styleSheets[0].cssRules[0].findRule('from');
     document.head.removeChild(style);
     setTimeout(crash, 0);
 }

 function crash()
 {
     gc();
     obj = rule.style.parentRule;
     if (window.layoutTestController)
         layoutTestController.notifyDone()
 }
 </script>
 </head>
 <body onload="load()">PASS</body>
 </html>
	<html>
	<head>
	<script>
	if (window.layoutTestController) {
	layoutTestController.dumpAsText();
	layoutTestController.waitUntilDone();
	}

	if (!window.gc)
	{
	window.gc = function()
	{
	if (window.GCController)
	return GCController.collect();
	for (var i = 0; i < 10000; i++)
	var s = new String("abc");
	}
	}

	function load()
	{
	style = document.createElement('style');
	style.textContent = '@-webkit-keyframes anim { from { color: green } }';
	document.head.appendChild(style);
	rule = document.styleSheets[0].cssRules[0].findRule('from');
	document.head.removeChild(style);
	setTimeout(crash, 0);
	}

	function crash()
	{
	gc();
	obj = rule.style.parentRule;
	if (window.layoutTestController)
	layoutTestController.notifyDone()
	}
	</script>
	</head>
	<body onload="load()">PASS</body>
	</html>