mirror of
https://github.com/LadybirdBrowser/ladybird.git
synced 2025-05-14 15:13:07 +00:00
604f6040a1
Previously calling `PaintableBox::set_scroll_offset()` with a PaintableBox whose content size was larger than its scrollble overflow rect would cause a crash. Found by Domato.
16 lines
339 B
HTML
16 lines
339 B
HTML
<!DOCTYPE html>
|
|
<style>
|
|
#test {
|
|
height: 0;
|
|
}
|
|
</style>
|
|
<script src="include.js"></script>
|
|
<div id="test">test</div>
|
|
<script>
|
|
test(() => {
|
|
const divElement = document.getElementById("test");
|
|
divElement.scrollBy(1, 1);
|
|
divElement.remove();
|
|
println("PASS (didn't crash)");
|
|
});
|
|
</script>
|