image-set-value-crash-in-fillImageSet.html

<!doctype html>
<html>
<head>
  <style>
    #standard-target {
      background: image-set(
        url(images/noise.png) 1x,
        url(images/[email protected]) 2x
      ), #ff0000;
    }
    
    #prefixed-target {
      background: -webkit-image-set(
        url(images/noise.png) 1x,
        url(images/[email protected]) 2x
      ), #ff0000;
    }
  </style>

  <script>
    if (window.testRunner)
      testRunner.dumpAsText();
  </script>
</head>

<body>
  <div>
    [bug 108409]
    <a href="https://bugs.webkit.org/show_bug.cgi?id=108409">
      https://bugs.webkit.org/show_bug.cgi?id=108409
    </a>
    Making -webkit-image-set() the first value of background property causes crash.
  </div>
  <div>If this test passed, no crash occurs.</div>
  <div id="standard-target">PASS</div>
  <div id="prefixed-target">PASS</div>
</body>
</html>

chromium/third_party/blink/web_tests/fast/css/image-set-value-crash-in-fillImageSet.html