File: fontfaceset-worker-fontface-crash.html

package info (click to toggle)
thunderbird 1%3A143.0.1-1
  • links: PTS, VCS
  • area: main
  • in suites: experimental
  • size: 4,703,968 kB
  • sloc: cpp: 7,770,492; javascript: 5,943,842; ansic: 3,918,754; python: 1,418,263; xml: 653,354; asm: 474,045; java: 183,079; sh: 111,238; makefile: 20,410; perl: 14,359; objc: 13,059; yacc: 4,583; pascal: 3,405; lex: 1,720; ruby: 999; exp: 762; sql: 715; awk: 580; php: 436; lisp: 430; sed: 69; csh: 10
file content (32 lines) | stat: -rw-r--r-- 907 bytes parent folder | download | duplicates (18) 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
 
<!doctype html>
<html class="test-wait">
<iframe id="frame" srcdoc=""></iframe>
<script id="worker1" type="javascript/worker">
self.onmessage = async function(e) {
  let a = new MessageEvent('message')
  for (let e = 0; e < 255; e++) {
    new Uint8ClampedArray(2048).fill(e)
  }
  try { self.dispatchEvent(a) } catch (e) {}
  let x = new FontFace('foo', 'x')
}
</script>
<script>
function tick() {
  return new Promise(r => {
    requestAnimationFrame(() => requestAnimationFrame(r));
  });
}
onload = async () => {
  let win = document.querySelector("#frame").contentWindow;
  const blob = new win.Blob([document.querySelector('#worker1').textContent], { type: "text/javascript" })
  let worker = new win.Worker(win.URL.createObjectURL(blob))
  worker.postMessage([], [])
  await tick();
  await tick();
  win.location.reload(true)
  await tick();
  document.documentElement.className = "";
};
</script>