From 4b2b642a4ed508b706c7d0d7173b27c7706cafc4 Mon Sep 17 00:00:00 2001
From: Mats Palmgren <matspal@gmail.com>
Date: Fri, 25 Jan 2013 18:34:30 +0100
Subject: [PATCH] Bug 325377 - Add crashtest.

---
 layout/xul/base/src/crashtests/325377.xul      | 16 ++++++++++++++++
 layout/xul/base/src/crashtests/crashtests.list |  1 +
 2 files changed, 17 insertions(+)
 create mode 100644 layout/xul/base/src/crashtests/325377.xul

diff --git a/layout/xul/base/src/crashtests/325377.xul b/layout/xul/base/src/crashtests/325377.xul
new file mode 100644
index 00000000000..8ea30473d84
--- /dev/null
+++ b/layout/xul/base/src/crashtests/325377.xul
@@ -0,0 +1,16 @@
+<window xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul" xmlns:html="http://www.w3.org/1999/xhtml"
+ title="Testcase bug 325377 - Crash on reload with evil xul textcase, using menulist and nested tooltips">
+<menulist style="display: table-cell;">
+<tooltip style="display: none;">
+    <tooltip/>
+</tooltip>
+</menulist>
+
+<html:script>
+function removestyles(){
+document.getElementsByTagName('tooltip')[0].removeAttribute('style');
+}
+try { document.getElementsByTagName('tooltip')[0].offsetHeight; } catch(e) {}
+setTimeout(removestyles,0);
+</html:script>
+</window>
\ No newline at end of file
diff --git a/layout/xul/base/src/crashtests/crashtests.list b/layout/xul/base/src/crashtests/crashtests.list
index 94ea08a427f..7528fd07bcd 100644
--- a/layout/xul/base/src/crashtests/crashtests.list
+++ b/layout/xul/base/src/crashtests/crashtests.list
@@ -15,6 +15,7 @@ load 311457-1.html
 load 321056-1.xhtml
 load 326834-1.html
 load 322786-1.xul
+load 325377.xul
 load 326879-1.xul
 load 327776-1.xul
 load 328135-1.xul