16 lines
353 B
HTML
16 lines
353 B
HTML
<html>
|
|
This test makes sure FontFaceSets don't access deleted documents. The test passes if there is no crash when running under ASan.
|
|
<script>
|
|
|
|
d = document.implementation.createDocument(null, '');
|
|
f = new FontFace('f', 'local(F)', {});
|
|
ffs = d.fonts;
|
|
delete d;
|
|
// gc();
|
|
GCController.collect();
|
|
|
|
// trigger use after free
|
|
ffs.add(f);
|
|
</script>
|
|
</html>
|