wine/gecko
0
0
Fork 0
mirror of https://gitlab.winehq.org/wine/wine-gecko.git synced 2024-09-13 09:24:08 -07:00
Code Issues Packages Projects Releases Wiki Activity

Bug 696188. Fix leak when adding different transform lists for animation. r=dholbert

Browse Source
This commit is contained in:
Boris Zbarsky 2011-10-25 12:58:35 -04:00
parent d94a00ec77
commit 3f42e0dcfa
3 changed files with 23 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
layout/style/crashtests/696188-1.html Normal file
View File

@ -0,0 +1,20 @@
<!DOCTYPE html>
<html>
<head>
<script>
function boom()
{
var e = document.createElementNS("http://www.w3.org/1999/xhtml", "div");
document.body.appendChild(e);
e.setAttribute("style", "-moz-transform: rotate3d(2, 3, 4, 45deg) scale(10);");
e.offsetHeight;
e.setAttribute("style", "-moz-transition-duration: 1ms;");
}
</script>
</head>
<body onload="boom();"></body>
</html>

1
layout/style/crashtests/crashtests.list
View File

@ -73,3 +73,4 @@ load 665209-1.html
asserts(2) load 671799-1.html
asserts(2) load 671799-2.html
load 690990-1.html
load 696188-1.html

3
layout/style/nsStyleAnimation.cpp
View File

@ -1544,7 +1544,8 @@ AddTransformLists(const nsCSSValueList* aList1, double aCoeff1,
AddDifferentTransformLists(&tempList1, aCoeff1, &tempList2, aCoeff2);
}
while ((*resultTail)->mNext) {
// Now advance resultTail to point to the new tail slot.
while (*resultTail) {
resultTail = &(*resultTail)->mNext;
}