| Torne (Richard Coles) | 5c87bf8 | 2012-11-14 11:46:17 +0000 | [diff] [blame] | 1 | <html>
|
| 2 | <head>
|
| 3 | <title>RenderMenuList::itemStyle Select Element Crash</title>
|
| 4 | <script>
|
| 5 | function removeItem() {
|
| 6 | var select = document.getElementById("dropDown");
|
| 7 | select.removeChild(document.getElementsByTagName("option")[2]);
|
| 8 | }
|
| 9 | </script>
|
| 10 | </head>
|
| 11 | <body>
|
| 12 | <select id="dropDown" onfocus="setTimeout('removeItem();', 2000);">
|
| 13 | <option>Option 1</option>
|
| 14 | <option>Option 2</option>
|
| 15 | <option>Option 3</option>
|
| 16 | </select>
|
| 17 | <p>This is a test for bug <a href="http://webkit.org/b/34182">34182</a> Crash in WebKit!WebCore::RenderMenuList::itemStyle.
|
| 18 | Once the select gets focus, in 2 seconds it will delete an item. This test passes
|
| 19 | if you have the select open when it deletes an item, and doesn't crash.</p>
|
| 20 | </body>
|
| 21 | </html>
|