File: fontfaceset-worker-fontface-crash.html

package info (click to toggle)
thunderbird 1%3A128.14.0esr-1~deb12u1
  • links: PTS, VCS
  • area: main
  • in suites: bookworm
  • size: 4,334,824 kB
  • sloc: cpp: 7,391,917; javascript: 5,617,271; ansic: 3,833,216; python: 1,230,742; xml: 619,690; asm: 456,022; java: 179,892; sh: 118,796; makefile: 21,908; perl: 14,825; objc: 12,399; yacc: 4,583; pascal: 2,973; lex: 1,720; ruby: 1,190; exp: 762; sql: 674; awk: 580; php: 436; lisp: 430; sed: 70; csh: 10
file content (32 lines) | stat: -rw-r--r-- 907 bytes parent folder | download | duplicates (18) 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
 
<!doctype html>
<html class="test-wait">
<iframe id="frame" srcdoc=""></iframe>
<script id="worker1" type="javascript/worker">
self.onmessage = async function(e) {
  let a = new MessageEvent('message')
  for (let e = 0; e < 255; e++) {
    new Uint8ClampedArray(2048).fill(e)
  }
  try { self.dispatchEvent(a) } catch (e) {}
  let x = new FontFace('foo', 'x')
}
</script>
<script>
function tick() {
  return new Promise(r => {
    requestAnimationFrame(() => requestAnimationFrame(r));
  });
}
onload = async () => {
  let win = document.querySelector("#frame").contentWindow;
  const blob = new win.Blob([document.querySelector('#worker1').textContent], { type: "text/javascript" })
  let worker = new win.Worker(win.URL.createObjectURL(blob))
  worker.postMessage([], [])
  await tick();
  await tick();
  win.location.reload(true)
  await tick();
  document.documentElement.className = "";
};
</script>