Bug 375299 - crashtest.

This commit is contained in:
bzbarsky@mit.edu 2013-12-23 16:51:58 +00:00
parent 8bb94d33ec
commit 01a8fa2044
3 changed files with 22 additions and 0 deletions

View File

@ -0,0 +1,4 @@
<bindings xmlns="http://www.mozilla.org/xbl">
<binding id="a">
<content><children/></content>
</binding></bindings>

View File

@ -0,0 +1,17 @@
<html><head>
<title>Testcase bug - Crash [@ nsFileControlFrame::CreateAnonymousContent] when removing stylesheet with binding and removing file input</title>
<style>
body {-moz-binding:url("375299-binding.xml#a"); }
</style>
</head><body onload="doe()">
<input type="file">
<script>
function doe() {
var x=document.getElementsByTagName('input')[0];
x.parentNode.removeChild(x);
var y=document.getElementsByTagName('style')[0];
y.parentNode.removeChild(y);
}
</script>
</body></html>

View File

@ -21,6 +21,7 @@ load 370703-1.html
load 370940-1.html
load 370967.html
load 373586-1.xhtml
load 375299.html
load 378369.html
asserts(5-10) load 378413-1.xhtml # bug 424225, bug 402850?
load 380116-1.xhtml