| <!DOCTYPE html> |
| <html> |
| <body id=tCF1> |
| A |
| <style> |
| .class1 { |
| background-image: -webkit-cross-fade(url(#does-not-exist), url(http://-4294967295), 157%); |
| } |
| .class2:first-of-type { |
| -webkit-animation-direction: alternate; |
| } |
| </style> |
| <script> |
| if (window.testRunner) |
| testRunner.dumpAsText(); |
| |
| var docElement = document.body; |
| docElement.contentEditable = "true"; |
| |
| function crash() { |
| test1 = document.createElementNS("http://www.w3.org/1999/xhtml", "thead"); |
| docElement.appendChild(test1); |
| test2 = document.createElementNS("http://www.w3.org/1999/xhtml", "intent"); |
| test2.setAttribute("class", "class2"); |
| docElement.appendChild(test2); |
| test1.setAttribute("class", "class1"); |
| window.getSelection().selectAllChildren(tCF1); |
| document.execCommand("hilitecolor", false, "#FF0000"); |
| document.execCommand("InsertText", false, "PASS. WebKit didn't crash."); |
| } |
| |
| document.addEventListener("DOMContentLoaded", crash, false); |
| </script> |
| </html> |
