blob: 42817babbbc6bb9c165d2798e1601ce3e23ceba2 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
|
// Copyright 2016 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "third_party/blink/renderer/core/dom/mutation_observer.h"
#include "testing/gtest/include/gtest/gtest.h"
#include "third_party/blink/renderer/bindings/core/v8/v8_mutation_observer_init.h"
#include "third_party/blink/renderer/core/dom/mutation_observer_registration.h"
#include "third_party/blink/renderer/core/html/html_document.h"
#include "third_party/blink/renderer/core/html/html_element.h"
#include "third_party/blink/renderer/platform/heap/heap.h"
namespace blink {
namespace {
class EmptyMutationCallback : public MutationObserver::Delegate {
public:
explicit EmptyMutationCallback(Document& document) : document_(document) {}
ExecutionContext* GetExecutionContext() const override {
return document_->GetExecutionContext();
}
void Deliver(const MutationRecordVector&, MutationObserver&) override {}
void Trace(Visitor* visitor) const override {
visitor->Trace(document_);
MutationObserver::Delegate::Trace(visitor);
}
private:
Member<Document> document_;
};
} // namespace
TEST(MutationObserverTest, DisconnectCrash) {
Persistent<Document> document = HTMLDocument::CreateForTest();
auto* root =
To<HTMLElement>(document->CreateRawElement(html_names::kHTMLTag));
document->AppendChild(root);
root->setInnerHTML("<head><title>\n</title></head><body></body>");
Node* head = root->firstChild()->firstChild();
DCHECK(head);
Persistent<MutationObserver> observer = MutationObserver::Create(
MakeGarbageCollected<EmptyMutationCallback>(*document));
MutationObserverInit* init = MutationObserverInit::Create();
init->setCharacterDataOldValue(false);
observer->observe(head, init, ASSERT_NO_EXCEPTION);
head->remove();
Persistent<MutationObserverRegistration> registration =
observer->registrations_.begin()->Get();
// The following GC will collect |head|, but won't collect a
// MutationObserverRegistration for |head|.
ThreadState::Current()->CollectAllGarbageForTesting(
BlinkGC::kNoHeapPointersOnStack);
observer->disconnect();
// The test passes if disconnect() didn't crash. crbug.com/657613.
}
} // namespace blink
|
