nephele
/
haikuwebkit
1
0
Fork 0
Code Issues Releases Activity
haikuwebkit/LayoutTests/fast/ruby/generated-after-counter-doe...

27 lines
406 B
HTML
Raw Permalink Normal View History

2011-06-28 Roland Steiner <rolandsteiner@chromium.org> Reviewed by Eric Seidel. Bug 55930 - (CVE-2011-1440) Incorrect handling of 'display:' property within nested <ruby> tags https://bugs.webkit.org/show_bug.cgi?id=55930 Test that a generated block child + counter within a <ruby> doesn't crash. (Test as provided by original reporter). * fast/ruby/generated-after-counter-doesnt-crash-expected.txt: Added. * fast/ruby/generated-after-counter-doesnt-crash.html: Added. * fast/ruby/generated-before-and-after-counter-doesnt-crash-expected.txt: Added. * fast/ruby/generated-before-and-after-counter-doesnt-crash.html: Added. * fast/ruby/generated-before-counter-doesnt-crash-expected.txt: Added. * fast/ruby/generated-before-counter-doesnt-crash.html: Added. 2011-06-28 Roland Steiner <rolandsteiner@chromium.org> Reviewed by Eric Seidel. Bug 55930 - (CVE-2011-1440) Incorrect handling of 'display:' property within nested <ruby> tags https://bugs.webkit.org/show_bug.cgi?id=55930 Don't set style type BEFORE/AFTER on anonymous wrapper block. Rather, check style type on generated wrapped child. Tests: fast/ruby/generated-after-counter-doesnt-crash.html fast/ruby/generated-before-and-after-counter-doesnt-crash.html fast/ruby/generated-before-counter-doesnt-crash.html * rendering/RenderRuby.cpp: (WebCore::isAnonymousRubyInlineBlock): (WebCore::isRubyBeforeBlock): (WebCore::isRubyAfterBlock): (WebCore::rubyBeforeBlock): (WebCore::rubyAfterBlock): (WebCore::createAnonymousRubyInlineBlock): (WebCore::RenderRubyAsInline::addChild): (WebCore::RenderRubyAsBlock::addChild): Canonical link: https://commits.webkit.org/79272@main git-svn-id: https://svn.webkit.org/repository/webkit/trunk@89987 268f45cc-cd09-0410-ab3c-d52691b4dbfc
2011-06-29 04:34:38 +00:00
<html>
<script>
Some tests still refer to layoutTestController instead of testRunner https://bugs.webkit.org/show_bug.cgi?id=93176 Reviewed by Adam Barth. Apparently there are still some tests referring to layoutTestController. Removed all of them as found by spotlight. * batterystatus/script-tests/event-after-navigation.js: * editing/deleting/smart-editing-disabled.html: * fast/dom/Geolocation/script-tests/callback-exception.js: * fast/dom/Geolocation/script-tests/clear-watch-invalid-id-crash.js: * fast/dom/Geolocation/script-tests/disconnected-frame-permission-denied.js: * fast/dom/Geolocation/script-tests/error.js: * fast/dom/Geolocation/script-tests/maximum-age.js: * fast/dom/Geolocation/script-tests/multiple-requests.js: * fast/dom/Geolocation/script-tests/no-page-cache.js: * fast/dom/Geolocation/script-tests/permission-denied-already-clear-watch.js: * fast/dom/Geolocation/script-tests/permission-denied-already-error.js: * fast/dom/Geolocation/script-tests/permission-denied-already-success.js: * fast/dom/Geolocation/script-tests/permission-denied-stops-watches.js: * fast/dom/Geolocation/script-tests/permission-denied.js: * fast/dom/Geolocation/script-tests/position-string.js: * fast/dom/Geolocation/script-tests/reentrant-error.js: * fast/dom/Geolocation/script-tests/reentrant-permission-denied.js: * fast/dom/Geolocation/script-tests/reentrant-success.js: * fast/dom/Geolocation/script-tests/success.js: * fast/dom/Geolocation/script-tests/timeout.js: * fast/dom/Geolocation/script-tests/watch.js: * fast/dom/Geolocation/script-tests/window-close-crash.js: * fast/encoding/resources/char-encoding-utils.js: (testsDone): * fast/encoding/resources/dynamic-load-target.js: * fast/encoding/resources/invalid-xml.js: (runNextTest): * fast/encoding/resources/parser-tests.js: (dotest.window.receivedResults): (dotest): * fast/events/touch/script-tests/touch-slider-no-js-touch-listener.js: * fast/events/touch/script-tests/touch-slider.js: (onKeyDown): * fast/harness/override-preferences-2-expected.txt: * fast/harness/override-preferences-2.html: * fast/harness/override-preferences-expected.txt: * fast/harness/override-preferences.html: * fast/harness/override-zzz-reset-expected.txt: * fast/harness/override-zzz-reset.html: * fast/harness/resources/results-test.js: * fast/harness/use-page-cache-expected.txt: * fast/harness/use-page-cache.html: * fast/ruby/after-block-doesnt-crash.html-disabled: * fast/ruby/after-table-doesnt-crash.html-disabled: * fast/ruby/generated-after-counter-doesnt-crash.html-disabled: * fast/ruby/generated-before-and-after-counter-doesnt-crash.html-disabled: * http/tests/eventsource/eventsource-events-after-close.html: * http/tests/misc/gmail-assert-on-load.html: * http/tests/misc/resources/char-encoding-in-hidden-charset-field.php: * http/tests/misc/resources/check-keygen-post.php: * http/tests/misc/resources/check-query-param.php: * http/tests/misc/resources/check-unnamed-file-included-in-formdata.php: * http/tests/misc/resources/chromium-selectionAsMarkup.html: * http/tests/misc/resources/delayed-log.php: * http/tests/misc/resources/form-post-textplain.php: * http/tests/misc/resources/location-test-xsl-style-sheet.xsl: * http/tests/misc/resources/percent-sign-in-form-data-field-name.cgi: * http/tests/misc/resources/post-echo-and-notify-done.cgi: * http/tests/misc/resources/prefetch-purpose.php: * http/tests/misc/resources/redirect-result.php: * http/tests/misc/resources/referrer-main-resource.php: * http/tests/misc/resources/referrer-result.php: * http/tests/misc/xhtml.php: * http/tests/misc/xmltokenizer-do-not-crash.pl: * http/tests/multipart/multipart-replace-non-html-content.php: * http/tests/multipart/policy-ignore-crash.php: * http/tests/multipart/win-boundary-crash.html-disabled: * http/tests/navigation/post-goback-repost-policy.html-disabled: * http/tests/navigation/resources/back-send-referrer-helper.php: * http/tests/navigation/resources/check-ping.php: * http/tests/navigation/resources/document-location.js: (start): * http/tests/navigation/resources/form-target.pl: * http/tests/navigation/resources/goback-with-policydelegate.php: * http/tests/navigation/resources/no-referrer-helper.php: * http/tests/navigation/resources/no-referrer-same-window-helper.php: * http/tests/navigation/resources/notify-done.html: * http/tests/navigation/resources/post-target-policy-test.php: * http/tests/navigation/resources/redirect-cycle-1.pl: * http/tests/navigation/resources/redirect302-metaredirect.pl: * http/tests/navigation/resources/redirected-post-request-contents.php: * http/tests/navigation/resources/submit-to-fragment.pl: * http/tests/navigation/resources/testcode.js: (runBasicTest): (runBackTest): (runLoadChildFrameTest): (runLoadChildFrameBackTest): (runReloadTest): (runLoadSameTest): (runRedirectReloadTest): * http/tests/navigation/useragent.php: * http/tests/resources/js-test-post.js: * http/tests/resources/js-test-pre.js: (finishJSTest): * http/tests/security/contentSecurityPolicy/resources/securitypolicy-tests-base.js: * http/tests/ssl/resources/no-http-referer.cgi: * http/tests/ssl/verify-ssl-enabled.php: * networkinformation/script-tests/event-after-navigation.js: * platform/mac/fast/objc/script-tests/webScriptObject-hasWebScriptKey.js: * platform/qt/svg/repaint/filter-repaint-expected.txt: * transforms/3d/hit-testing/resources/hit-test-utils.js: * transforms/3d/point-mapping/point-mapping-helpers.js: (runTest): * transitions/resources/transition-test-helpers.js: (expected): * transitions/transition-end-event-helpers.js: (runTransitionTest.processEndEvents): * webaudio/resources/audio-codec-test.js: (runDecodingTest): (finishedLoading): * webaudio/resources/audio-testing.js: (finishAudioTest): * webaudio/resources/audioparam-testing.js: (createAudioGraphAndTest): * webaudio/resources/oscillator-testing.js: (generateExponentialOscillatorSweep): * webintents/resources/web-intents-testing.js: (onSuccess): (onFailure): (startIntentWithCallbacks): Canonical link: https://commits.webkit.org/111030@main git-svn-id: https://svn.webkit.org/repository/webkit/trunk@124691 268f45cc-cd09-0410-ab3c-d52691b4dbfc
2012-08-04 06:26:36 +00:00
if (window.testRunner)
testRunner.dumpAsText();
2011-06-28 Roland Steiner <rolandsteiner@chromium.org> Reviewed by Eric Seidel. Bug 55930 - (CVE-2011-1440) Incorrect handling of 'display:' property within nested <ruby> tags https://bugs.webkit.org/show_bug.cgi?id=55930 Test that a generated block child + counter within a <ruby> doesn't crash. (Test as provided by original reporter). * fast/ruby/generated-after-counter-doesnt-crash-expected.txt: Added. * fast/ruby/generated-after-counter-doesnt-crash.html: Added. * fast/ruby/generated-before-and-after-counter-doesnt-crash-expected.txt: Added. * fast/ruby/generated-before-and-after-counter-doesnt-crash.html: Added. * fast/ruby/generated-before-counter-doesnt-crash-expected.txt: Added. * fast/ruby/generated-before-counter-doesnt-crash.html: Added. 2011-06-28 Roland Steiner <rolandsteiner@chromium.org> Reviewed by Eric Seidel. Bug 55930 - (CVE-2011-1440) Incorrect handling of 'display:' property within nested <ruby> tags https://bugs.webkit.org/show_bug.cgi?id=55930 Don't set style type BEFORE/AFTER on anonymous wrapper block. Rather, check style type on generated wrapped child. Tests: fast/ruby/generated-after-counter-doesnt-crash.html fast/ruby/generated-before-and-after-counter-doesnt-crash.html fast/ruby/generated-before-counter-doesnt-crash.html * rendering/RenderRuby.cpp: (WebCore::isAnonymousRubyInlineBlock): (WebCore::isRubyBeforeBlock): (WebCore::isRubyAfterBlock): (WebCore::rubyBeforeBlock): (WebCore::rubyAfterBlock): (WebCore::createAnonymousRubyInlineBlock): (WebCore::RenderRubyAsInline::addChild): (WebCore::RenderRubyAsBlock::addChild): Canonical link: https://commits.webkit.org/79272@main git-svn-id: https://svn.webkit.org/repository/webkit/trunk@89987 268f45cc-cd09-0410-ab3c-d52691b4dbfc
2011-06-29 04:34:38 +00:00
</script>
<style type="text/css">
ruby:after{
counter-reset: g -2532653 K -48696899414062 ll -48202514648437 rr -1821899414062;
}
ruby::after{
display: table;
2011-06-28 Roland Steiner <rolandsteiner@chromium.org> Unreviewed: change URLs in ruby layout tests to lower case in order to avoid having to have separate Chromium expectations. * fast/ruby/after-block-doesnt-crash-expected.txt: * fast/ruby/after-block-doesnt-crash.html: * fast/ruby/after-table-doesnt-crash-expected.txt: * fast/ruby/after-table-doesnt-crash.html: * fast/ruby/before-block-doesnt-crash-expected.txt: * fast/ruby/before-block-doesnt-crash.html: * fast/ruby/before-table-doesnt-crash-expected.txt: * fast/ruby/before-table-doesnt-crash.html: * fast/ruby/generated-after-counter-doesnt-crash-expected.txt: * fast/ruby/generated-after-counter-doesnt-crash.html: * fast/ruby/generated-before-and-after-counter-doesnt-crash-expected.txt: * fast/ruby/generated-before-and-after-counter-doesnt-crash.html: * fast/ruby/generated-before-counter-doesnt-crash-expected.txt: * fast/ruby/generated-before-counter-doesnt-crash.html: * platform/chromium-mac/fast/ruby/after-block-doesnt-crash-expected.txt: Removed. * platform/chromium-mac/fast/ruby/after-table-doesnt-crash-expected.txt: Removed. * platform/chromium-mac/fast/ruby/before-block-doesnt-crash-expected.txt: Removed. * platform/chromium-mac/fast/ruby/before-table-doesnt-crash-expected.txt: Removed. * platform/chromium-win/fast/ruby/after-block-doesnt-crash-expected.txt: Removed. * platform/chromium-win/fast/ruby/after-table-doesnt-crash-expected.txt: Removed. * platform/chromium-win/fast/ruby/before-block-doesnt-crash-expected.txt: Removed. * platform/chromium-win/fast/ruby/before-table-doesnt-crash-expected.txt: Removed. Canonical link: https://commits.webkit.org/79275@main git-svn-id: https://svn.webkit.org/repository/webkit/trunk@89990 268f45cc-cd09-0410-ab3c-d52691b4dbfc
2011-06-29 06:06:14 +00:00
content: url("http://xx");
2011-06-28 Roland Steiner <rolandsteiner@chromium.org> Reviewed by Eric Seidel. Bug 55930 - (CVE-2011-1440) Incorrect handling of 'display:' property within nested <ruby> tags https://bugs.webkit.org/show_bug.cgi?id=55930 Test that a generated block child + counter within a <ruby> doesn't crash. (Test as provided by original reporter). * fast/ruby/generated-after-counter-doesnt-crash-expected.txt: Added. * fast/ruby/generated-after-counter-doesnt-crash.html: Added. * fast/ruby/generated-before-and-after-counter-doesnt-crash-expected.txt: Added. * fast/ruby/generated-before-and-after-counter-doesnt-crash.html: Added. * fast/ruby/generated-before-counter-doesnt-crash-expected.txt: Added. * fast/ruby/generated-before-counter-doesnt-crash.html: Added. 2011-06-28 Roland Steiner <rolandsteiner@chromium.org> Reviewed by Eric Seidel. Bug 55930 - (CVE-2011-1440) Incorrect handling of 'display:' property within nested <ruby> tags https://bugs.webkit.org/show_bug.cgi?id=55930 Don't set style type BEFORE/AFTER on anonymous wrapper block. Rather, check style type on generated wrapped child. Tests: fast/ruby/generated-after-counter-doesnt-crash.html fast/ruby/generated-before-and-after-counter-doesnt-crash.html fast/ruby/generated-before-counter-doesnt-crash.html * rendering/RenderRuby.cpp: (WebCore::isAnonymousRubyInlineBlock): (WebCore::isRubyBeforeBlock): (WebCore::isRubyAfterBlock): (WebCore::rubyBeforeBlock): (WebCore::rubyAfterBlock): (WebCore::createAnonymousRubyInlineBlock): (WebCore::RenderRubyAsInline::addChild): (WebCore::RenderRubyAsBlock::addChild): Canonical link: https://commits.webkit.org/79272@main git-svn-id: https://svn.webkit.org/repository/webkit/trunk@89987 268f45cc-cd09-0410-ab3c-d52691b4dbfc
2011-06-29 04:34:38 +00:00
}
</style>
<ruby>
<ruby>
<ruby>
<style type="text/css">
ruby{
float: left;
}
</style>
<ruby>
This test passes if it doesn't crash.