Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 733945bf30e9c82bb6413b91c9d5c0c1c6d38809
https://github.com/WebKit/WebKit/commit/733945bf30e9c82bb6413b91c9d5c0c1c6d38809
Author: fred <[email protected]>
Date: 2026-03-11 (Wed, 11 Mar 2026)
Changed paths:
A
LayoutTests/fast/block/float/floating-first-child-button-of-select-not-cleared-expected.txt
A
LayoutTests/fast/block/float/floating-first-child-button-of-select-not-cleared.html
Log Message:
-----------
Add crash test for bug 308359
https://bugs.webkit.org/show_bug.cgi?id=309558
Reviewed by Alan Baradlay.
This adds a crash test for https://commits.webkit.org/308356@main
where a floating first child button of a select element was later
not properly cleared. This can be reproduced by tweaking the HTML
UA style sheet with the following patch and repeating execution
of the crash test several times with ASAN or Debug builds
(e.g. by passing --repeat=50 to the run-webkit-tests script).
```
diff --git a/Source/WebCore/css/html.css b/Source/WebCore/css/html.css
index 72876e45d371..80679ee16db7 100644
--- a/Source/WebCore/css/html.css
+++ b/Source/WebCore/css/html.css
@@ -1122,7 +1122,6 @@ select:not(:-internal-uses-menulist):enabled {
select:not([multiple]):-internal-uses-menulist > button:first-child {
all: unset;
- display: contents;
}
select::picker-icon {
```
*
LayoutTests/fast/block/float/floating-first-child-button-of-select-not-cleared-expected.txt:
Added.
*
LayoutTests/fast/block/float/floating-first-child-button-of-select-not-cleared.html:
Added.
Canonical link: https://commits.webkit.org/309046@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications