Back to Chromium

End Of Buffer Crash

third_party/blink/web_tests/fast/css/end-of-buffer-crash.html

149.0.7827.2223 B
Original Source

This test tickles a subtle off-by-one bug in how the CSS lexer handles end of buffer conditions. The contents of the style tag satisfy (length mod 8 = 2) and contain an unclosed curly brace. We pass if we don't crash.

PASS