blob: 43ca0c314cbe346e94bd9c946b87bbfef1b09dc9 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
|
<html>
<head>
<title>RenderMenuList::itemStyle Select Element Crash</title>
<script>
function removeItem() {
var select = document.getElementById("dropDown");
select.removeChild(document.getElementsByTagName("option")[2]);
}
</script>
</head>
<body>
<select id="dropDown" onfocus="setTimeout('removeItem();', 2000);">
<option>Option 1</option>
<option>Option 2</option>
<option>Option 3</option>
</select>
<p>This is a test for bug <a href="http://webkit.org/b/34182">34182</a> Crash in WebKit!WebCore::RenderMenuList::itemStyle.
Once the select gets focus, in 2 seconds it will delete an item. This test passes
if you have the select open when it deletes an item, and doesn't crash.</p>
</body>
</html>
|
